Risk Advisory Consultant

We are seeking a highly skilled, experienced SOC Audit Consultant to lead and support SOC 1 (Type I & II) and SOC 2 (Type I & II) audit engagements with a deep understanding of SOC 1 and SOC 2 frameworks to join our Risk Advisory and Cybersecurity Consulting practice . This role requires someone who can manage engagements, guide teams, and collaborate with clients on control design, implementation, testing, and remediation. The ideal candidate will have a strong background in IT risk management, internal controls, and compliance frameworks, with a passion for helping organizations achieve and maintain audit readiness

Key Responsibilities :

• Lead and managed engagements for SOC 1 (Type I & II) and SOC 2 (Type I & II) audits including planning, fieldwork, and reporting.
• Assess design and operating effectiveness of internal controls over financial reporting (SOC 1) and trust services criteria (SOC 2).
• Evaluate existing client controls and processes against AICPA Trust Services Criteria (TSC) for Security, Availability, Confidentiality, Processing Integrity, and Privacy.
• Serve as the primary client contact, handling stakeholder communication, status updates, and issue resolution.
• Review and validate control evidence, assess the design and operating effectiveness of controls, and identify any deficiencies.
• Lead walkthroughs and meetings with process owners and external auditors.
• Advise clients on control design, remediation strategies, and audit readiness.
• Prepare high-quality reports and presentations summarizing findings, risks, and remediation recommendations.
• Provide gap assessments and readiness reviews for SOC compliance.
• Stay up to date with evolving regulatory, compliance, and cybersecurity trends, especially related to SOC, ISO 27001, NIST, and similar frameworks.
• Serve as a trusted advisor to clients throughout the audit lifecycle.
• Communicate findings and recommendations clearly to technical and non-technical stakeholders.
• Manage timelines, deliverables, and expectations across multiple engagements.
• Experience with audit tools and GRC platforms (e.G., AuditBoard, LogicGate, ServiceNow).

Required Qualifications :