SOC 2 Director - CPA Required

Location: Remote in USA
Type: Permanent, Full-Time, Partner level
Pay: $150k-$210 base + Profit Share/Bonus
Travel: < 25%

*** Please ensure you read through the entire job posting and you also understand the work model, expectations, requirements, location, and qualification requirements for this role. ***

About Us:

RSI Security is a leading cybersecurity compliance firm that specializes in providing comprehensive security assessment, advisory, and technical security testing services. RSI is trusted by over 500 organizations for their PCI DSS, PCI SSF and ASV, CMMC, HITRUST, vCISO and penetration testing. As an accredited PCI QSA, C3PAO and HITRUST assessment organization, We support organizations in simplifying the complex cybersecurity landscape, ensuring they achieve and maintain compliance while managing risks effectively.

Position Summary:

This position will be client facing and you will lead IT & cybersecurity risk and control activities for the Risk & Audit department. The successful candidate will collaborate with internal team members and external stakeholders to assess risk, design and implement appropriate controls, coordinate remediation efforts, investigate operational events, and consolidate the risk profile.

Roles & Responsibilities:

• Development and Management of SOC 2 Type 1 and 2 service delivery
• Pre-Sales Support
• Work with Marketing to develop White Paper, blog and other relevant content
• Build and optimize delivery system, documentation, templates, methodology, and processes
• Help identify performance improvement opportunities for assigned clients
• Execution of client engagements and internal activities related to SOC 1, SOC 2, and SOC 3 examinations
• External audits of other security and privacy frameworks/standards
• Actively create and participate performance-based delivery methodology
• Train staff in the IT & cybersecurity team

Qualifications:

• Active CPA and member of AICPA with experience in IT audit and SOC 2 at a CPA firm providing SOC 2 services
• 5 - 8 years of experience with SOC 2 audit
• Proficient in SOC 2 compliance tool and methodology
• Demonstrated auditing services related to security, compliance, and attestation services
• Demonstrated execution of the day-to-day activities of IT audit engagements and readiness assessments
• Deep understanding of the design and effectiveness of technology controls
• Manage and provide performance management for IT audit staff working on assigned engagements
• Provide weekly status reports to other directors and partners.