1 to 25 of 35 Remote/Hybrid Permanent SOC 2 Jobs

and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skillsJoin us and you will be part of a fast-growing community of like … ensure ongoing effectivenessIdentify control gaps, deficiencies, and areas for improvementCompliance & Risk AlignmentAssess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2)Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA)Support regulatory and internal compliance initiativesEnsure controls align ...

and are operating effectively to mitigate risk. The ideal candidate has strong experience in control testing, audits, and compliance frameworks (e.g., ISO 27001, NIST, SOC 2, NIS2), combined with analytical thinking and stakeholder engagement skills Join us and you will be part of a fast-growing community … effectiveness Identify control gaps, deficiencies, and areas for improvement Compliance & Risk Alignment Assess controls against relevant frameworks (e.g., ISO 27001, NIST CSF, CIS Controls, SOC 2, NIS2) Assess control effectiveness across: Design Effectiveness (DE), Operating Effectiveness (OE) and Control Automation (CA) Support regulatory and internal compliance initiatives Ensure ...

overflow. You are taking over a production estate that is highly specific: a Node.js application and public API running on Amazon EKS (eu-west-2) , backed by Aurora MySQL 8 (with a read replica) and ElastiCache Redis , fronted by ALB and CloudFront/WAF. Everything is codified using Terraform …/CodeBuild. Observability runs on CloudWatch and a self-hosted Prometheus/Grafana cluster stack, paging via PagerDuty. You will also directly own our SOC 2 compliance programme, keeping controls green via Vanta. What You'll Do Run EKS Production: Own our live AWS environment, handling EKS node ...

simulation campaigns and security awareness initiatives run by the security and compliance function. • Contribute evidence and system configuration detail in support of CMMC and SOC 2 audit readiness cycles. Support, Automation, and Continuity • Provide advanced technical support and resolve escalated IT tickets with professionalism and efficiency. • Strong scripting … transferable Windows and Linux server administration depth applicable to cloud-hosted compute. • Experience supporting a federal contractor environment, including familiarity with CMMC Level 2 and SOC 2 requirements. • Working understanding of compliance frameworks such as NIST 800-171, ISO 27001/27002, and CMMC. • Familiarity with JSON ...

and Access Transparency, relevant to deploying per-market for different banks' regulatorsHands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSSExperience automating security controls and compliance checks against standards and frameworks including SOC 2 ...

Zero Trust principles. You'll also oversee improvements across endpoint hardening, vulnerability management, IAM, cloud security and internal controls. Working with an outsourced SOC and MDR provider, you'll ensure security monitoring and escalation processes are effective, while helping progress initiatives such as SASE and SOC 2 … ability to develop this further (they use GCP) You have experience of improving security controls, architecture and operational processes You're familiarity with outsourced SOC/MDR services, Zero Trust, SASE or SOC 2 You have excellent communication skills, able to explain technical risks and recommendations ...

security, identity/access management, zero-trust, and MDR partnerships. Lead security programs including security awareness, vendor risk, customer security assessments, and DevSecOps. Own SOC 2, SOX ITGC, privacy, data protection, and AI governance programs. Oversee business continuity, disaster recovery, incident management, release governance, onboarding/offboarding, and … infrastructure-as-code, automation, and modern cloud operations. Proven experience building or maturing cybersecurity programs, including SIEM, identity, endpoint security, and detection. Experience with SOC 2, SOX ITGC, or comparable compliance programs. Understanding of FinOps, SaaS management, and technology cost optimization. Strong operational, leadership, communication, and cross-functional ...

security, identity/access management, zero-trust, and MDR partnerships. Lead security programs including security awareness, vendor risk, customer security assessments, and DevSecOps. Own SOC 2, SOX ITGC, privacy, data protection, and AI governance programs. Oversee business continuity, disaster recovery, incident management, release governance, onboarding/offboarding, and … infrastructure-as-code, automation, and modern cloud operations. Proven experience building or maturing cybersecurity programs, including SIEM, identity, endpoint security, and detection. Experience with SOC 2, SOX ITGC, or comparable compliance programs. Understanding of FinOps, SaaS management, and technology cost optimization. Strong operational, leadership, communication, and cross-functional ...

support the Information Security Manager in delivering security assurance activities across Experian Data Quality (EDQ). You will help ensure compliance with ISO 27001, SOC 2, Experian security standards, and regulatory requirements while supporting the continuous improvement of EDQ's security and compliance posture. You will work with … governance meetings. Audit & AssuranceHelp with ISMS internal audits and supporting Global Internal Audit activities. Support ISO 27001 certification activities across multiple regions. Help with SOC 2 attestation activities for EDQ's flagship application. Support customer, regulatory, and third-party audits. Track audit findings and supporting the completion ...

endpoint or account security alerts. Work with Security colleagues to remediate issues and strengthen security controls. Assist with compliance activities, including maintaining evidence for SOC 2, ISO 27001, DORA or comparable frameworks. 7. Projects and Continuous Improvement Identify and implement automation opportunities that reduce repetitive administration and improve … management and Linux endpoints. Building integrations and automations using scripts, APIs or workflow tools. Experience maintaining CMDBs, asset registers and operational dashboards. Involvement in SOC 2, ISO 27001, DORA or similar audit and compliance activities. Supplier management, technology procurement and coordination of workplace technology projects. Benefits The organisation ...

Technology Internal Auditor Manchester | Hybrid Working (1–2 Days in Office) | Up to £40,000 Are you an experienced auditor or compliance professional looking to take the next step in your career within a growing technology business? We're working with an established and innovative financial technology company that … responsibilities include: Planning, coordinating and conducting internal audits across the business. Supporting external audits and certification assessments. Working with recognised frameworks including ISO 27001, SOC 2 and PCI-DSS. Reviewing internal controls, identifying risks and recommending improvements. Gathering and maintaining audit evidence and compliance documentation. Collaborating with internal ...

incidents. Work closely with system owners to identify security gaps, prioritise remediation, and verify that implemented controls effectively reduce risk. Customer Trust & Compliance EngineeringSupport SOC 2 compliance by helping establish continuous control monitoring, automated evidence collection, and processes that make security assurance part of everyday operations. Collaborate with … Monitoring: You've implemented logging, protective monitoring, or security detection capabilities that support effective investigation and incident response. Security Assurance & Compliance: You've supported SOC 2 or ISO 27001 from an engineering perspective, including implementing technical controls or automating compliance evidence collection. Nice-to-haves Vulnerability Disclosure ...

business Supporting onboarding and offboarding processes Ensuring internal systems remain secure and compliant Working alongside external consultants certification projects such as IS27001/SOC 2 Providing technical information, documentation and evidence throughout the audit process Identifying opportunities to improve internal processes, security and efficiency What we're looking … environments Good understanding of cyber security best practices and access management Experience supporting security audits, compliance programmes or certifications such as ISO 27001 or SOC 2 A proactive and self sufficient approach Strong communication skills with the ability to support both technical and non technical users Why join ...

solve the business need before introducing additional tools Support AI governance and identify opportunities to improve business operations through AI and automation Support SOC 2 and ISO 27001/27701 compliance initiatives Maintain clear documentation around system decisions, risks, issues, processes, and controls IT Operations This position will … cash, billing, revenue operations, or finance systems Google Workspace and identity/SSO experience Experience using AI for business-process automation or internal applications SOC 2, ISO 27001, or similar compliance experience Experience with Jira, Confluence, or similar systems for intake, prioritization, and delivery PMP, Agile/Scrum ...

align with what you want to do. Hybrid working - our approach is to be in the office or on client site a minimum of 2 days per week. Work on a broad variety of projects and tech stacks for clients across seven sectors - no project is ever the same … residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle process Excellent ...

code (OPA/Gatekeeper), service mesh (Istio/Linkerd) and SSO/identity integration. Knowledge of regulatory frameworks and controls (e.g., ISO 27001, SOC 2, PCI DSS) and audit evidence collection. Experience running high-availability platforms and performing capacity planning and cost optimisation. ...

environments. Strong practical understanding of PCI DSS requirements and compliance frameworks. Solid understanding of common security standards and laws (NIST 800-53, ISO 27001, SOC 2 Type II, Cyber Essentials Plus, UK DPA 2018).Exceptional verbal and written communication skills with the confidence to influence cross-functional stakeholders. ...

raise and track issues with vendors or internal teams through timely resolution. Evidence of IGA governance controls for audit engagements (e.g., SOX, Dodd Frank, SOC 2, internal audit), preparing walkthroughs, evidence packs, and remediation tracking. Maintain technical documentation, runbooks, SOPs, and architecture diagrams; keep them current as integrations …/Azure AD, Active Directory, Amazon AWS) and common enterprise environments (Linux, Windows Server). Experience supporting audit or regulatory engagements (SOX, Dodd Frank, SOC2), including evidence preparation, control walkthroughs, and remediation tracking. Strong written and verbal communication skills; able to present technical concepts clearly to both engineering peers and ...

automation and be reluctant for manual implementationBuild systems with security by design as a core foundationEnsure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DSDesign and operate key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager ...

automation and be reluctant for manual implementationBuild systems with security by design as a core foundationEnsure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DSDesign and operate key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager ...

infrastructure as a Platform Engineer or SRE. Desirable experience Building platforms for fintech, banking or payments businesses. Supporting compliance frameworks such as PCI-DSS, SOC 2 or ISO 27001. Establishing monitoring and on-call processes from scratch. Operating multi-tenant SaaS platforms. The package Generous annual leave allowance ...

observability stacks Demonstrated cost work: you can point to cloud spend you found, explained, and reduced Experience in compliance-heavy environments (FedRAMP, StateRAMP, SOC 2, or similar) is a strong plus Comfortable holding production access, with the discipline that implies Key Competencies Treats environment integrity as sacred ...

Background as a Software Engineer, DevOps Engineer, or SREExperience selling into German enterprise accountsFamiliarity with enterprise security, compliance, and governance requirements (e.g. ISO 27001, SOC 2, NIS2, DORA, GDPR, change management)Experience selling or supporting SaaS or platform productsWhy Join UsReal territory ownership from day one. ...

accountable owner who finds the gaps before an auditor or a client does. This is a hands-on, single-person role, not a SOC or team-leadership position and Reports to Operations Manager What You Will Do Own our ISO certifications: Maintain our existing ISO 27001, 9001, 14001 and … Security+. Knowledge of UK public-sector security expectations, including NCSC guidance, ITHC and departmental supplier assurance. Knowledge of UK GDPR and ICO obligations, SOC 2 or supplier risk management. Knowledge of Home Office sponsor-licence compliance from the IT and asset management perspective. We are not looking ...

threats to their organisation. Deep understanding of common compliance frameworks and security standards (e.g., NIST SP 800-53, NIST CSF, ISO 27001/27002, SOC 2).Have a strong technical understanding of networking, computing and cyber security conceptsHave the ability to use examples and analogies to simplify complex … very best work: Time off, flexible and remote working so you can work when is best for you, includes 25 days annual leave + 2 volunteering days and your birthday offThe longer you are with Immersive, the more holiday days you get, up to a maximum of 30 days ...