SOC 2 Analyst

Required Skills & Experience

• 5+ years of experience in compliance, IT audit, governance, risk and compliance (GRC), or information security.
• Hands-on experience supporting or facilitating SOC 2 audits.
• Experience supporting external audits, compliance certifications, or regulatory assessments.
• Strong understanding of SOC 2 Trust Services Criteria and controls management.
• Specific experience supporting Privacy and/or Processing Integrity control domains.
• Experience conducting readiness assessments, gap analyses, and audit preparation activities.
• Ability to gather and organize audit evidence and coordinate responses to auditor requests.
• Experience working with both technical and non-technical stakeholders.
• Strong communication, documentation, and project coordination skills.

Nice to Have Skills & Experience

• Experience supporting all five SOC 2 Trust Services Criteria.
• Familiarity with privacy management platforms such as OneTrust or similar solutions.
• Experience in large enterprise environments.
• Background in telecommunications or other highly regulated industries.
• CISA, CIPP, IAPP or CRISC certification

Job Description

A large telecommunications customer is seeking an experienced SOC 2 Compliance Analyst to support a critical initiative focused on the Privacy and Processing Integrity Trust Services Criteria. The organization currently maintains SOC 2 audits centered on security controls but must expand coverage to include all five AICPA Trust Services Criteria as part of new business and compliance commitments. This consultant will partner closely with compliance, privacy, legal, security, technology, and business stakeholders to assess current-state controls, perform readiness activities, identify gaps, coordinate evidence collection, and support audit preparedness efforts ahead of a planned SOC 2 audit next summer. The ideal candidate has hands-on experience facilitating SOC 2 audits, working directly with auditors and control owners, and helping organizations mature privacy and processing integrity control frameworks.