IT Audit Consultant – SOC 1 & SOC 2

ABOUT THE ROLE

As an IT Audit Consultant on our SOC Services team, you'll lead SOC examinations for innovative organizations ranging from fast-growing startups to enterprise clients. You'll own engagements from planning through report issuance, serve as a trusted advisor to clients, review the work of junior consultants, and deliver high-quality audits that help organizations build trust with their customers.

Success in this role means bringing hands-on experience leading SOC examinations for clients, strong audit judgment, and the ability to build lasting relationships while delivering an exceptional client experience.

WHAT YOU'LL DO

• Lead and perform SOC 1 and SOC 2 examinations for clients from planning through report issuance, ensuring high-quality client deliverables.

• Build trusted client relationships by managing engagement timelines, expectations, and communication throughout the audit process.
• Evaluate information security controls through walkthroughs and testing, while providing practical recommendations.
• Review workpapers and prepare reports to ensure quality, consistency, and compliance with professional standards.
• Mentor and coach Associates through technical development, engagement execution, and client interactions.
• Collaborate with cross-functional teams to enhance methodologies, documentation, and internal processes.
• Identify opportunities to improve engagement quality, audit methodology, and the overall client experience.

WHAT YOU BRING

• Bachelor's degree in Information Technology, Information Systems, Cybersecurity, Accounting, or a related field, or an equivalent combination of education and experience.
• 3+ years of experience in IT audit, including experience performing SOC examinations, preferably within a consulting or CPA firm.
• 2+ years of experience independently leading SOC examinations as the auditor, including Type I and Type II, from planning through report issuance.
• Experience performing walkthroughs, control testing, audit documentation, and report preparation for SOC examinations.
• Strong knowledge of the AICPA Trust Services Criteria (TSC) and internal control concepts.
• Experience evaluating information security risks, control design, and operating effectiveness.
• Working knowledge of cloud environments (AWS, Azure, or Google Cloud Platform) and/or on-premises infrastructure.
• Experience mentoring or supervising junior auditors or consultants.
• Excellent written and verbal communication skills, with the ability to manage client relationships independently.
• Ability to obtain an industry certification (CISA, CPA, CISSP, CISM, ISO Lead Auditor, etc.) within one year of hire.
• Ability to travel up to 20% as needed.

YOU'LL STAND OUT IF YOU…

• Have experience with additional compliance frameworks such as ISO 27001, HITRUST, HIPAA, or PCI DSS.
• Have worked with compliance automation or GRC platforms such as Vanta, Drata, Secureframe, or similar tools.
• Enjoy mentoring others and helping shape best practices within a growing consulting team.
• Bring a continuous improvement mindset and enjoy finding ways to enhance client and team experiences.

PERKS & BENEFITS

• Remote-first workplace, including a $200/month work-from-home stipend
• Competitive compensation, including employer-paid health and wellness benefits
• Monthly Uber Eats meal stipend
• Monthly WeWork office stipend for flexible workspace access
• 401(k) with employer matching
• Employee performance bonus program
• Client and employee referral program
• Media engagement opportunities and PR exposure
• In-house manager development and leadership training
• Professional certification support and continuing education opportunities
• Unlimited PTO and paid company holidays
• Employer matching gift program and volunteer paid time off
• Collaborative, team-oriented environment 

WHY JOIN BARR ADVISORY

BARR Advisory specializes in meeting clients where they are, from small start-ups to global enterprises and everything in between. With the ability to customize our cybersecurity compliance and consulting services based on the individual needs of our clients, we bring a friendly and unique approach to how we serve them. As we get to know our clients, their teams, and their systems, we become true partners and trusted advisors. At BARR, we empower organizations to build trust by establishing, managing, and auditing cybersecurity and compliance programs.

At BARR Advisory, our core values guide everything we do. Our team finds fulfillment in serving others and supporting each other, which translates into trusted client relationships. While it is a fun place to work, we solve tough problems together and collaborate to bring the highest level of quality to our clients. BARR invests in a remote culture that gives our teams autonomy, mastery, and purpose, along with the empowerment to be their true selves.

EQUAL OPPORTUNITY EMPLOYER

At BARR, we are proud to be an inclusive workplace, and we are committed to hiring and developing diverse talent. 

BARR Advisory is an equal opportunity employer, and we will consider all qualified applicants for employment without regard to age, race, color, religion, sex, gender identity, sexual orientation, national origin, disability status, protected veteran status, or any other characteristic protected by law. 

We are committed to providing reasonable accommodation to individuals with disabilities throughout the application and interview process and in performing essential job functions. Please contact us to request an accommodation.

At this time, we cannot consider candidates who require US work authorization sponsorship, now or in the future, or who reside outside the United States.