Senior IT/GRC SOC 2 Auditor

ISG

Senior IT/GRC Auditor leading SOC 2 and IT compliance engagements at Insight Assurance. Guiding teams and ensuring high-quality audits across LATAM with a focus on ITGC.

Posted 7/21/2026full-timeRemote • 🇨🇷 Costa RicaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in ITGC and application control testing, with a strong focus on SOC 2 and HIPAA compliance. Proven ability to lead audits, mentor junior team members, and maintain client relationships through effective communication.

Highest-signal resume keywords

IT Audit ExperienceSOC 2 Framework KnowledgeClient Communication SkillsProject Management SkillsBilingual in English

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

ITGC TestingApplication Control TestingSOC 1 EngagementsHIPAA ComplianceControl Gap Identification

Soft Skills

Proactive CommunicationTeam Leadership

Tools & Technologies

GRC ToolsAWSAzureGCP

Certifications & Qualifications

CISACPACISSPISO 27001 Lead Auditor

Industry Keywords

IT AuditsControl RemediationClient Relationships

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Lead ITGC and application control testing efforts
Guide and review work completed by junior team members
Perform walkthroughs, testing, and documentation for SOC 2, SOC 1, and HIPAA engagements
Identify control gaps and provide recommendations for remediation
Maintain strong client relationships through clear and proactive communication
Ensure timely progress updates and escalate issues to management

Requirements

What you’ll need

3–4 years of experience performing IT audits, with a focus on ITGC and application controls
Strong working knowledge of SOC 2 and related frameworks
Bachelor’s degree in Accounting, MIS, Cybersecurity, or a related field
Strong client communication and project management skills
Bilingual in English required
Experience with GRC tools (e.g., Vanta, Drata, Secureframe) (Nice to Have)
Familiarity with cloud environments such as AWS, Azure, or GCP (Nice to Have)
Progress toward CISA, CPA, CISSP, ISO 27001 Lead Auditor (Nice to Have)

Benefits

Comp & perks

Remote work with flexible hours
Paid holidays and time off
Growth opportunities in a fast-paced firm
Bonus incentives tied to performance