IT Audit Consultant (SOC 1 / SOC 2)

BARR Advisory

14h•Remote

About The Position

As an IT Audit Consultant on our SOC Services team, you'll lead SOC examinations for innovative organizations ranging from fast-growing startups to enterprise clients. You'll serve as a trusted advisor throughout the audit lifecycle, partnering closely with clients, mentoring junior consultants, and delivering high-quality compliance engagements that help organizations build trust with their customers. Success in this role means independently leading client engagements, building lasting client relationships, developing the next generation of consultants, and delivering exceptional client experiences while maintaining the highest standards of audit quality. If you enjoy combining technical expertise with leadership, thrive in a collaborative consulting environment, and take pride in helping clients solve complex compliance challenges, you'll feel right at home on our team.

Requirements

Bachelor's degree in Information Technology, Information Systems, Cybersecurity, Accounting, or a related field, or an equivalent combination of education and experience.
3+ years of experience in IT auditing, cybersecurity compliance, or IT advisory, preferably within a consulting or CPA firm.
2+ years leading SOC 1 and SOC 2 engagements (Type I and Type II).
Experience performing walkthroughs, control testing, audit documentation, and report preparation for SOC examinations.
Strong knowledge of the AICPA Trust Services Criteria (TSC) and internal control concepts.
Experience evaluating information security risks, control design, and operating effectiveness.
Working knowledge of cloud environments (AWS, Azure, or Google Cloud Platform) and/or on-premises infrastructure.
Experience mentoring or supervising junior auditors or consultants.
Excellent written and verbal communication skills, with the ability to independently manage client relationships.
Ability to obtain an industry certification (CISA, CPA, CISSP, CISM, ISO Lead Auditor, etc.) within one year of hire.
Ability to travel up to 20% as needed.

Nice To Haves

Have experience with additional compliance frameworks such as ISO 27001, HITRUST, HIPAA, or PCI DSS.
Have worked with compliance automation or GRC platforms such as Vanta, Drata, Secureframe, or similar tools.
Enjoy mentoring others and helping shape best practices within a growing consulting team.
Bring a continuous improvement mindset and enjoy finding ways to enhance client and team experiences.

Responsibilities

Lead SOC 1 and SOC 2 engagements from planning through report issuance, ensuring high-quality client deliverables.
Build trusted relationships with clients by managing engagement timelines, expectations, and communication throughout the audit process.
Evaluate information security controls through walkthroughs and testing, while providing practical recommendations.
Review workpapers and prepare reports to ensure quality, consistency, and compliance with professional standards.
Mentor and coach Associates through technical development, engagement execution, and client interactions.
Collaborate with cross-functional teams to enhance methodologies, documentation, and internal processes.
Identify opportunities to improve engagement quality, audit methodology, and the overall client experience.