> Markdown version of [/jobs/ext/573259-cpa-auditor-soc-2-and-it-assurance](https://www.wearedevelopers.com/jobs/ext/573259-cpa-auditor-soc-2-and-it-assurance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# CPA Auditor - SOC 2 and IT Assurance

- **Company:** Consilium, LLC
- **Location:** United States (Remote available)
- **Salary:** $75,000.0 - $120,000.0
- **Contract:** Permanent contract
- **Skills:** Software as a Service, Software Documentation, Cyber Security, Information Technology Audit, PCI Data Security Standards, Cloud Platform System, IT General Controls (ITGC)
- **Published:** June 5, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=433f3f509be67320

## About the Role

Do you have experience in Customer communication?, * Active U.S. CPA license in good standing

 * Experience with SOC 2 engagements, IT audits, or assurance engagements or related attestation work
 * Strong written and verbal communication skills
 * Ability to work independently and manage multiple engagements
 * Strong attention to detail and professional judgment

Preferred Qualifications

 * Experience with SOC 2 Type I and Type II audits
 * Familiarity with cloud environments and SaaS companies
 * Exposure to ISO 27001, ISO 27701, PCI DSS, or cybersecurity frameworks
 * Familiarity with Vanta, Drata, Secureframe, or similar compliance platforms
 * Experience evaluating IT controls and information security processes
 * CISA, CISSP, or related certifications are a plus

## Description

Consilium Labs is seeking a full-time employee licensed CPA to support and perform SOC 2 and related assurance engagements for technology and cloud-based companies.

The ideal candidate has experience with SOC 2 engagements, IT controls, or information security environments, and is comfortable working directly with clients, reviewing evidence, and participating in attestation engagements from planning through reporting.

This role works closely with our technical audit and compliance teams supporting SOC 2, ISO 27001, ISO 27701, ISO 42001, vendor assurance, and related cybersecurity assessments.

Employment is contingent upon successful completion of a background check in accordance with applicable law., * Participate in and perform SOC 2 Type I and Type II engagements

 * Review controls, evidence, policies, procedures, and testing documentation
 * Evaluate IT general controls and information security-related controls
 * Assist with drafting and reviewing SOC 2 reports
 * Communicate with clients regarding audit requests, walkthroughs, and testing
 * Work with technical auditors and cybersecurity specialists during engagements
 * Support engagement planning, testing, reporting, and quality review activities
 * Ability to sign reports subject to internal quality review procedures
 * Maintain compliance with AICPA attestation standards and independence requirements
 * Assist with improving internal methodologies and audit processes


## Related Videos

- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Beyond the Hype: Building Trustworthy and Reliable LLM Applications with Guardrails](https://www.wearedevelopers.com/videos/1594-beyond-the-hype-building-trustworthy-and-reliable-llm-applications-with-guardrails)
- [Cloud Vendor Lock-In - Is it just a new version of the Database Abstraction Layers?](https://www.wearedevelopers.com/videos/1185-cloud-vendor-lock-in-is-it-just-a-new-version-of-the-database-abstraction-layers)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026)