Information Security Associate – Senior Associate, System and Organization Controls (SOC 1 / SOC 2) Compliance

Tevora

. Participate in IT and Compliance assessments, audits, gap analyses, and remediation .

Posted 10/7/2026full-timeUnited StatesSenior💰 $84,000 - $96,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT compliance assessments, security policy frameworks, and control design, with a strong ability to communicate effectively across technical and business domains. Proficient in developing documentation and reports while supporting various compliance standards such as SOC, HITRUST, and PCI.

Highest-signal resume keywords

SOC 1 Compliance AssessmentSOC 2 Compliance AssessmentHITRUST Gap AssessmentSecurity+ CertificationFirewall Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecuritySecurity Policy FrameworksControl DesignNetwork DesignSystems DesignAccess ControlAuthenticationTechnical DocumentationDisaster Recovery PlansCompliance Remediation

Soft Skills

Effective CommunicationIndependent Work

Tools & Technologies

MS Office

Certifications & Qualifications

Security+CCNAISO Lead Implementer

Industry Keywords

Compliance AssessmentsIT AuditsGap AnalysesPolicy DevelopmentCompensating Controls

About the role

Key responsibilities & impact

Participate in IT and Compliance assessments, audits, gap analyses, and remediation
Contribute to SOC 1 and SOC 2 compliance assessment projects
Communicate questions, updates, and project needs to Tevora project leads and stakeholders
Support HITRUST, C5, PCI, and ISO gap assessments
Assist in developing customized policies, procedures, controls, disaster recovery plans, and other client documentation
Identify policy or compliance exceptions and document exceptions, compensating controls, and remediation action plans
Provide internal content to improve practice processes
Participate in ongoing training opportunities
Perform additional duties as assigned

Requirements

What you’ll need

Knowledge of security policy frameworks and control design
Knowledge of security architecture, network, and systems design
Minimum of 1 year of experience in information security, information technology, business consulting, enterprise risk, or compliance
Knowledge of firewall management, server management, access control, and authentication
Ability to communicate effectively across business and technical boundaries
Ability to work independently with minimal guidance
Proficiency in writing executive-level reports and technical documentation
Proficient in MS Office tools and basic professional acumen
At least one professional certification completed or in progress, such as Security+, CCNA, or ISO Lead Implementer
Eligibility to work in the United States

Benefits

Comp & perks

Comprehensive benefits offering
Paid time off and holidays
401K with Company discretionary match
Vibrant work culture
Ongoing training opportunities
Continued learning opportunities