Information Security Auditor (SOC Services)

About the role

KirkpatrickPrice is seeking an IT and security-savvy auditor to join a growing compliance industry. This candidate will design effective control tests and interpret how risk impacts a wide range of business environments while assisting clients—from startups to enterprises—in achieving challenging compliance and security goals. The role emphasizes quality testing, diligence, and strong interpersonal partnerships with clients.

Responsibilities

• Lead the delivery of audits, using various tools and technology to assess against frameworks.
• Conduct interviews across organizational levels and travel to client locations as needed.
• Perform test procedures, gather and document evidence, and collaborate with the professional writing team to deliver high-quality audit reports on time.
• Conduct end-to-end SOC audits and assessments, including SOC1, SOC2, PCI, ISO 27001, HIPAA, and HITRUST.
• Collaborate to enhance internal controls and processes.
• Evaluate and analyze business processes and IT systems to identify risks and controls relevant to internal control over financial reporting (ICFR).
• Evaluate deficiencies, recommendations, and corrective action plans.
• Participate in trainings to stay current with industry trends, regulations, and best practices.

Qualifications

• Bachelor’s degree in accounting, finance, or related field (or master’s degree in similar area, including information systems).
• 5+ years of experience in SOC services, including SOC1 and SOC2 assessments.
• CPA certification is highly desirable.
• QSA, CISSP, and other related certifications are also desired.
• Exposure to the audit function of information security as a beneficiary of audits.
• Direct audit experience.
• Strong analytical and problem-solving skills with acute attention to detail.
• Excellent communication and interpersonal skills for interacting with internal and external stakeholders.
• Strong ability to write workpapers.
• Proven Big 4 experience is a strong asset.
• In-depth knowledge of accounting principles, auditing standards, and regulatory requirements, including compliance standards SOC1, SOC2, PCI, HIPAA, FISMA, GLBA, HITRUST, GDPR, and ISO.
• Exposure to a wide range of security tools.
• Experience coordinating simultaneous projects at different stages.

Characteristics

• Extreme level of integrity.
• Passion for teaching clients about applicable compliance standards.
• Unparalleled professionalism in conduct and appearance.
• Willingness to travel nationwide, 30–50% of the time.
• Self-motivated to work virtually and independently with minimal supervision.

Pay

Base pay is $115,000–$150,000 annually, plus a bonus structure.