IT Audit Consultant (SOC 1 / SOC 2)

BARR Advisory is a security and compliance solutions provider specializing in cybersecurity and compliance for organizations with high-value data that serve regulated industries such as healthcare, financial services, and government. Serving some of the fastest growing cloud-based organizations around the globe, BARR simplifies compliance across multiple regulatory and customer requirements.

As an IT Audit Consultant on our SOC Services team, you'll lead SOC examinations for innovative organizations ranging from fast-growing startups to enterprise clients. You'll serve as a trusted advisor throughout the audit lifecycle, partnering closely with clients, mentoring junior consultants, and delivering high-quality compliance engagements that help organizations build trust with their customers. Success in this role means independently leading client engagements, building lasting client relationships, developing the next generation of consultants, and delivering exceptional client experiences while maintaining the highest standards of audit quality. If you enjoy combining technical expertise with leadership, thrive in a collaborative consulting environment, and take pride in helping clients solve complex compliance challenges, you'll feel right at home on our team.

• →Lead SOC 1 and SOC 2 engagements from planning through report issuance, ensuring high-quality client deliverables.
• →Build trusted relationships with clients by managing engagement timelines, expectations, and communication throughout the audit process.
• →Evaluate information security controls through walkthroughs and testing, while providing practical recommendations.
• →Review workpapers and prepare reports to ensure quality, consistency, and compliance with professional standards.
• →Mentor and coach Associates through technical development, engagement execution, and client interactions.
• →Collaborate with cross-functional teams to enhance methodologies, documentation, and internal processes.
• →Identify opportunities to improve engagement quality, audit methodology, and the overall client experience.

• Bachelor's degree in Information Technology, Information Systems, Cybersecurity, Accounting, or a related field, or an equivalent combination of education and experience.
• 3+ years of experience in IT auditing, cybersecurity compliance, or IT advisory, preferably within a consulting or CPA firm.
• 2+ years leading SOC 1 and SOC 2 engagements (Type I and Type II).
• Experience performing walkthroughs, control testing, audit documentation, and report preparation for SOC examinations.
• Strong knowledge of the AICPA Trust Services Criteria (TSC) and internal control concepts.
• Experience evaluating information security risks, control design, and operating effectiveness.
• Working knowledge of cloud environments (AWS, Azure, or Google Cloud Platform) and/or on-premises infrastructure.
• Experience mentoring or supervising junior auditors or consultants.
• Excellent written and verbal communication skills, with the ability to independently manage client relationships.
• Ability to obtain an industry certification (CISA, CPA, CISSP, CISM, ISO Lead Auditor, etc.) within one year of hire.
• Ability to travel up to 20% as needed.

• Have experience with additional compliance frameworks such as ISO 27001, HITRUST, HIPAA, or PCI DSS.
• Have worked with compliance automation or GRC platforms such as Vanta, Drata, Secureframe, or similar tools.
• Enjoy mentoring others and helping shape best practices within a growing consulting team.
• Bring a continuous improvement mindset and enjoy finding ways to enhance client and team experiences.

BARR Advisory is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, gender identity, sexual orientation, national origin, disability status, protected veteran status, or any other characteristic protected by law. 

We are committed to providing reasonable accommodation to individuals with disabilities throughout the application and interview process and in the performance of essential job functions. Please contact us to request an accommodation.

At this time, we are unable to consider candidates who require US work authorization sponsorship, now or in the future, or candidates who reside outside of the United States.