Role Overview

Key Responsibilities

1. SOC Audit Preparation & Client Guidance

- Lead organizations through SOC audit experiences (Type I & Type II), providing end to-end advisory across multiple frameworks
- Assess organizational readiness, identify gaps in existing controls, and create remediation roadmaps tailored to client requirements
- Educate internal stakeholders on SOC requirements, control objectives, and compliance best practices across different trust service principles

- Ground-Up Systems & Controls Design

- Design and document SOC control frameworks from scratch, tailored to each client's

operational environment, business model, and risk profile

- Establish evidence collection processes using Scrut, creating templates, checklists, and governance structures for consistent documentation across trust service principles
- Define roles and responsibilities for evidence owners and ensure clear escalation protocols for control failures or non-conformances

1. Evidence Collection, Organization & Management

- Collate, organize, and validate SOC evidence using the Scrut platform, ensuring all audit trail requirements and control mappings are met
- Maintain evidence libraries across multiple control domains with version control, change tracking, and audit trail integrity
- Work with process owners and stakeholders to ensure evidence submission is timely, complete, and audit-ready

- Audit Execution & Subject Matter Expertise

- Serve as the primary liaison between clients and external auditors, addressing audit inquiries, clarifications, and follow-ups promptly
- Manage audit timelines, track action items, and coordinate remediation efforts for identified control deficiencies or exceptions

- Vulnerability & Control Remediation

- Support rapid closure of vulnerabilities, exceptions,



and control gaps with a strict 1- day turnaround time (from receipt of report) for initial assessment and remediation planning
- Coordinate cross-functional teams to implement corrective actions, verify effective closure, and update evidence accordingly
- Document remediation evidence and update control testing matrices to reflect improvements and closure

- Ongoing Compliance & Continuous Audit-Readiness

- Establish monthly evidence collection and control testing schedules to ensure continuous compliance between audit cycles
- Proactively monitor control performance, identify drift or degradation, and initiate corrective actions before formal audit cycles
- Maintain compliance calendars, track control testing renewals, and refresh evidence libraries regularly in Scrut
- Conduct quarterly compliance reviews with clients to assess control maturity, identify emerging risks, and plan for future audit scopes.

Experience

- 3+ years of hands-on experience in SOC compliance, audit, control design, or related compliance frameworks
- Proven track record guiding organizations through SOC audit cycles (at least 3+ client engagements)
- Hands-on proficiency with Scrut software for evidence management, control mapping, and audit automation
- Experience designing control frameworks and evidence collection systems from the ground up for SaaS, fintech, BPO, or support center organizations
- Strong understanding of SOC 1 Type II,



SOC 2 Type I & II, SOC 3, and related audit scopes, testing methodologies, and reporting requirements

Technical Skills

- Advanced proficiency with Scrut platform—configuration, evidence linking, control mapping, audit workflows, and reporting
- Solid understanding of SOC trust service principles and criteria: security, availability, processing integrity, confidentiality, and privacy
- Proficiency with Excel/Google Sheets for control matrices, testing documentation, and compliance dashboards
- Familiarity with other compliance frameworks (ISO 27001, GDPR, HIPAA, NIST, SOX) is highly valued

Certifications (Preferred but not mandatory)

- CISSP (Certified Information Systems Security Qualified)
- CISA (Certified Information Systems Auditor)
- CPA or CA (Chartered Accountant) with audit experience
- SOC auditor certification or equivalent audit training
- AICPA SOC credential or compliance specialist designation

Soft Skills & Personal Attributes

- Excellent communication skills—ability to explain complex compliance requirements and control logic to non-technical stakeholders
- Strong project management and organizational abilities—managing multiple client engagements and audit cycles simultaneously
- Detail-oriented and meticulous—ensuring all compliance documentation is accurate, complete, and audit-ready at all times
- Proactive problem-solver—identifying compliance gaps and risks proactively, and recommending data-driven remediation strategies
- Ability to work under pressure—managing tight deadlines and delivering results on the 1-day vulnerability remediation turnaround

Why This Role?

This is an excellent opportunity for a compliance specialist seeking to make a direct, visible

📌 SOC Compliance & Audit Specialist (Hyderabad)
🏢 Acceler8 GLOBAL
📍 Hyderabad