Job Title: SOC 2 Senior Tester
Location: Remote (LATAM)
Employment Type: Full-Time
Experience Level: Senior (5+ years SOC audit/testing experience)

Role Overview
We are seeking an experienced SOC 2 Senior Tester to join our assurance team. This role is responsible for performing detailed control testing, evaluating evidence, documenting results, and supporting the successful delivery of SOC 2 engagements for clients across various industries. The adecuado candidate is highly organized, technically knowledgeable, and comfortable working directly with clients in both English and Spanish.

Key Responsibilities

Lead and perform SOC 2 Type I and Type II control testing, including walkthroughs, evidence evaluation, and test documentation.

Assess the design and operating effectiveness of controls across Security, Availability, Processing Integrity, Confidentiality, and Privacy Trust Services Criteria.

Collaborate closely with engagement managers and clients to obtain required evidence and clarify control expectations.

Draft audit workpapers, test results, and supporting documentation in accordance with AICPA standards.

Identify control gaps, exceptions, and improvement opportunities, and articulate them clearly to clients.

Assist with planning and scoping of SOC engagements, including risk assessments and control mapping.

Maintain up-to-date knowledge of SOC standards, regulatory expectations, and industry best practices.

Participate in internal quality reviews to ensure consistent, high-quality deliverables.





Communicate effectively with clients in both English and Spanish, verbally and in writing.

Required Qualifications

Minimum of 5 years of hands-on SOC audit or security compliance testing experience.

Active CISA certification (or equivalent such as CISSP, CPA with SOC experience, or ISO Lead Auditor).

Fluency in both English and Spanish (professional proficiency in speaking and writing).

Strong understanding of SOC 2 frameworks, AICPA Trust Services Criteria, and related auditing standards.

Experience evaluating IT general controls (ITGCs), cloud environments, identity and access management, change management, security monitoring, and related domains.

Excellent documentation and communication skills.

Ability to work independently, manage deadlines, and collaborate in a team-oriented environment.

Ability to conduct client walkthroughs independently.

Preferred Skills

Experience with CMMC assessments or implementations (Level 1–3).

Experience with SOC 1, ISO 27001, HIPAA, PCI, or other security/compliance frameworks.

Familiarity with cloud service providers (AWS, Azure, GCP).

Prior experience in a public accounting firm, cybersecurity consulting firm, or third-party assurance practice.

Strong analytical and problem-solving skills.

What we offer

Competitive compensation

Remote and flexible work environment

Professional development support and continuing education reimbursement

Opportunity to work with a wide range of clients and technologies

#J-18808-Ljbffr

📌 SOC 2 Testing Engineer (Xico)
🏢 NovamentUSA
📍 Xico