Skip to content

Open nowPosted 13 hours ago

Information Security Associate -Senior Associate System and Organization Controls (SOC 1 / SOC 2) Compliance

Tevora16 open roles

Pay
$84,000 – $96,000 a year
Where
Irvine, CA
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowInformation Security Associate -Senior Associate System and Organization Controls (SOC 1 / SOC 2) ComplianceTevora · Irvine, CA
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Tevora's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.7%1 day
  2. 3.6%3 days
  3. 8.1%7 days
  4. 15.1%14 days
  5. 34.0%30 days
This job: posted 13 hours ago

The posting

Information Security Associate - Senior Associate System and Organization Controls (SOC 1 / SOC 2) Compliance

at Tevora

Irvine, CA or Fairfax, VA

If you haven't heard of Tevora, it's because we've done our job!

Tevora is a tight-knit community of professionals with a shared passion for our craft. Every day, we combine in-depth knowledge of cybersecurity, technology, and compliance to help create more secure digital environments. To Tevorans, every problem is a puzzle in need of solving. We strongly believe that if we put smart, driven people in a room together, they will accomplish great things. We maintain a supportive culture that celebrates continuous learning, diverse perspectives, and sharing the wins. That's why we have our eyes on you.

What's the role?

Tevora is seeking an Information Security Associate -Senior Associate to join the SOC Compliance team.

This role on the SOC Compliance team is looking for a passionate individual who can apply solid Cyber Security fundamentals, who has a solid professional demeanor, and who knows how to learn by doing.

This role will be responsible for supporting assessments of AICPA’s System and Organization Controls (SOC) compliance, for SOC 1 and SOC 2, on a wide variety of client projects for some of the world's largest organizations. Other compliance frameworks this role will work on may include ISO 27001, HITRUST, C5, and PCI as well as GRC support for clients. This role will also provide internal content to improve practice processes and participate in ongoing training opportunities.

The successful candidate for this role will be detail-oriented, have a solution-focused attitude, and possess strong written and verbal communication skills.

A day in the life could include:

  • Participating in IT and Compliance assessments, audits, gap analyses, and remediation.
  • Actively contributing to projects in the areas of System and Organization Controls (SOC 1 & SOC 2) Compliance assessments.
  • Communicating with Tevora project leads and project stakeholders to effectively convey questions, updates, and the needs of a project.
  • Supporting various information security compliance projects, such as HITRUST, C5, PCI, or ISO gap assessments.
  • Assisting in the development of customized policies, procedures, controls, disaster recovery plans, and other documentation for applications, systems, and infrastructure for our clients.
  • Identifying policy or compliance exceptions for Clients, including working directly with the teams to document exceptions, and identifying compensating controls and remediation action plans.
  • Additional duties as assigned.

Necessary skills and qualifications:

  • Have knowledge of security policy frameworks and control design.
  • Have knowledge of security architecture, network, and systems design.
  • Completed a minimum of 1 year of experience in information security, information technology, business consulting, enterprise risk, or compliance field.
  • Possess knowledge of common IT and security concepts such as firewall management, server management, access control, and authentication.
  • Ability to connect easily with clients and colleagues to communicate effectively across business and technical boundaries- to translate between technical and business communities.
  • Ability to work independently with minimal guidance.
  • Proficient in writing executive-level reports and technical documentation.
  • Commitment to continued learning.
  • Proficient in MS Office tools and basic professional acumen.
  • At least One Professional Certification completed or in progress (Sec +, CCNA, ISO Lead Implementer, etc.).

Bonus Points:

  • Hold a bachelor’s degree from an accredited 4-year university
  • Demonstrated experience in at least 1 year of SOC 2 Compliance assessments
  • Demonstrated experience in at least one other information security compliance assessment (ISO 27001, PCI Level 1, HITRUST)
  • Hold at least one Auditing, Risk, or IT certification from the following list: CISSP, CISA, CISM, CRISC, ISO Lead Auditor.
  • Prior or current CPA license

We've got you covered!

  • Comprehensive benefits offering
  • Paid time off and holidays
  • 401K with Company discretionary match
  • Vibrant work culture

Additinal Requirments:

  • Eligibility to work in the United States.

EEOC Statement

Tevora is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, disability status, or other applicable legally protected characteristics.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Tevora's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Tevora's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Tevora's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.