Wilson Consulting Group LLC Senior SOC 2 Type 2 Auditor Remote · Contractor

Conduct SOC 2 Type 2 Assessment

Description

  • Evaluating controls: The core responsibility of a SOC 2 Type 2 assessor is to evaluate an organization's internal controls against the relevant AICPA Trust Services Criteria (TSC). These criteria include:
  • Security: Protection against unauthorized access, disclosure, and damage.
  • Availability: Ensuring systems are available for operation and use.
  • Processing Integrity: Ensuring accurate, complete, and timely data processing.
  • Confidentiality: Protecting confidential information.
  • Privacy: Safeguarding personal information.
  • Gap analysis: Conducting readiness assessments and identifying any gaps in the organization's existing controls.
  • Testing controls: Testing the operating effectiveness of controls over the audit period.
  • Evidence collection: Gathering sufficient and appropriate evidence to support the auditor's opinion.
  • Report writing: Compiling the results of the audit into a detailed SOC 2 Type 2 report.
  • Providing recommendations: Offering guidance on remediation and best practices for improving security posture.