1

Soc Auditor Jobs in Raleigh, NC (NOW HIRING)

... compliance across SOC 2, ISO 27001, Cyber Essentials, and related frameworks. This is a ... Auditor Multi-framework experience Experience scaling compliance programs in high-growth ...

... compliance across SOC 2, ISO 27001, Cyber Essentials, and related frameworks. This is a ... Auditor Multi-framework experience Experience scaling compliance programs in high-growth ...

Senior Security Engineer II

Raleigh, NC · On-site

$95.30 - $158.80/hr

Develop and maintain a unified control framework aligned to SOC 2, ISO 27001, and other standards ... Certifications such as CISSP, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor.

New

... auditors for security certifications. * Office Locations: NYC (office is near Grand Central ... Familiar with GDPR, SOC, NIST, and ISO 27001 standards and associated audit processes * Security ...

New

Soc Auditor information

See Raleigh, NC salary details

$37.4K

$90.2K

$146.8K

How much do soc auditor jobs pay per year?

As of Aug 8, 2026, the average yearly pay for soc auditor in Raleigh, NC is $90,206.00, according to ZipRecruiter salary data. Most workers in this role earn between $70,000.00 and $108,900.00 per year, depending on experience, location, and employer.

What does a Soc Auditor do?

A SOC Auditor evaluates and assesses an organization's controls related to security, availability, processing integrity, confidentiality, and privacy, often in accordance with standards like SOC 1, SOC 2, or SOC 3. They review policies, perform testing, and prepare reports to ensure compliance and effectiveness of controls, typically requiring knowledge of auditing procedures and relevant frameworks.

What is a SOC auditor?

SOC Auditors are professionals who evaluate an organization’s systems and controls, typically focusing on security, availability, processing integrity, confidentiality, and privacy. Their primary role is to conduct audits based on the System and Organization Controls (SOC) framework, such as SOC 1, SOC 2, or SOC 3 reports. SOC Auditors assess whether a company’s internal controls are effective and compliant with industry standards, providing assurance to clients and stakeholders about the organization’s risk management and data protection practices.

What are some common challenges SOC auditors face when working with clients during the audit process?

SOC Auditors often encounter challenges such as coordinating with clients to obtain timely and complete evidence, clarifying complex control environments, and ensuring that all relevant stakeholders understand the scope and requirements of the audit. Communication skills are crucial, as auditors must balance maintaining independence with providing clear guidance. Additionally, adapting to different client industries and varying levels of preparedness can make each engagement unique, requiring flexibility and strong organizational skills.

What is the difference between Soc Auditor vs Security Analyst?

AspectSoc AuditorSecurity Analyst
CertificationsISO 27001 Lead Auditor, CISACompTIA Security+, CISSP
Work EnvironmentAudit firms, consulting companies, in-house audit teamsIT departments, cybersecurity firms, corporate security teams
Industry UsageUsed mainly in compliance and audit contextsUsed in threat detection and security management

While both roles focus on security, a Soc Auditor primarily conducts audits to ensure compliance with security standards, whereas a Security Analyst monitors and responds to security threats. The Soc Auditor's role is more about assessment and compliance, while the Security Analyst actively manages security incidents.

What are the key skills and qualifications needed to thrive as a SOC auditor, and why are they important?

To thrive as a SOC Auditor, you need a solid understanding of auditing principles, risk assessment, and information security frameworks, often supported by a degree in accounting, information systems, or a related field and relevant certifications like CISA or CPA. Familiarity with audit management software, GRC tools, and systems such as SSAE 18 is typically required. Strong analytical thinking, attention to detail, and effective communication skills help SOC Auditors excel in assessing controls and reporting findings. These competencies are crucial for ensuring organizations meet compliance requirements, manage risks, and maintain stakeholder trust.

How to become a SOC auditor?

To become a SOC auditor, typically one needs a background in accounting, information security, or IT auditing, along with relevant certifications such as CPA, CISA, or CISSP. Gaining experience in cybersecurity, internal controls, and audit procedures is essential, and many employers prefer candidates with knowledge of SOC reporting standards and audit tools. Continuing education and staying current with industry regulations also support career advancement in this field.
What cities near Raleigh, NC are hiring for Soc Auditor jobs? Cities near Raleigh, NC with the most Soc Auditor job openings:
Infographic showing various Soc Auditor job openings in Raleigh, NC as of August 2026, with employment types broken down into 81% Full Time, 6% Part Time, and 13% Contract. Highlights an 87% In-person, and 13% Remote job distribution, with an average salary of $90,206 per year, or $43.4 per hour.

Senior Security Engineer II

RELX

Raleigh, NC • Hybrid

$95K - $158K/yr

Full-time

Medical, Life, Retirement

Re-posted 14 hours ago


Job description

This position is a Hybrid role on site in the Raleigh N.C. office 2-3 days a week.

Senior Security Engineer II - Compliance Automation & Controls

About Us

LexisNexis, a part of RELX, is a leading global provider of legal, regulatory, and business information. We help customers increase productivity and improve decision-making and outcomes. Our 10,500 experts and innovative tools help us shape a better world for our customers and communities.

About the Role

We are seeking a Senior Security Engineer to design and implement a scalable Governance, Risk, and Compliance (GRC) foundation across our cloud-based environment. This role will focus on standardizing controls, improving ownership visibility, and enabling automated evidence collection to support continuous compliance across SOC 2, ISO 27001, Cyber Essentials, and related frameworks. This is a transformation-focused role. The successful candidate will partner with compliance, security, and engineering teams to move the organization from a manual, audit-driven model to a structured, automation-enabled GRC program.

Responsibilities

GRC Platform Implementation & Automation

Lead implementation and administration of a GRC platform (e.g., Vanta)

Configure controls, evidence mapping, and integrations (AWS, identity systems, etc.)

Establish automated evidence collection and continuous monitoring

Reduce reliance on manual evidence gathering

Control Framework Development

Develop and maintain a unified control framework aligned to SOC 2, ISO 27001, and other standards

Define control statements, evidence requirements, and testing expectations

Map controls across frameworks to reduce duplication

Maintain traceability between controls and evidence

Ownership & System Mapping

Establish team-based ownership model for controls

Align systems and services to responsible teams

Maintain lightweight system inventory

Improve ownership visibility to reduce audit coordination overhead

Audit Enablement

Support audit readiness through well-defined and monitored controls

Partner with compliance team to streamline audits

Enable evidence reuse across frameworks

Process Standardization & Continuous Improvement

Standardized documentation and workflows

Improve efficiency and reduce audit fatigue

Support policy and standards development

Define and track compliance metrics, leveraging automation and data analytics to support continuous audit readiness and control effectiveness

All other duties as assigned

Requirements

Bachelor's degree in Computer Science, Information Security, Information Systems, or a related technical field, or equivalent practical experience

5+ years of experience in security, compliance, or audit-focused roles

Proven experience leading ISO/IEC 27001 and SOC 2 audits end-to-end

Hands-on experience with a GRC platform (AuditBoard, Drata, Vanta, or similar) - required

Strong understanding and experience with control frameworks

Ability to translate technical implementations into audit-ready controls and documentation

Strong stakeholder management and auditor-facing communication skills

Experience in cloud-native or SaaS environments (AWS, Azure, or GCP preferred)

Preferred Qualifications

Experience with automation and continuous compliance

Certifications such as CISSP, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor

Multi-framework experience

Experience scaling compliance programs in high-growth environments

Work in a way that works for you

We promote a healthy work/life balance across the organization, with various flexible and remote working options available to employees

Working with Us

LexisNexis Legal & Professional is proud to be an equal-opportunity employer. We are committed to equal opportunity employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. Together, we are building a diverse and inclusive workplace.

Working for you

We believe in a healthy work/life balance. We know that your well-being and happiness are key to a long and successful career. These are some of the benefits we are delighted to offer:

- Comprehensive, multi-carrier health plan benefits - Disability insurance - Dependent care and commuter spending accounts - Life and accident insurance - Retirement benefits (salary investment plan/employer stock purchase plan) - Modern family benefits, including adoption and surrogacy

About our Team

LexisNexis is a data and analytics company with 10,500 colleagues serving customers in more than 150 countries. We're one of the largest information and analytics companies on the planet. We design solutions that help our customers increase productivity, improve decision-making and outcomes, and be more successful.

#AIFluent

U.S. National Base Pay Range: $95,300 - $158,800. Geographic differentials may apply in some locations to better reflect local market rates. This job is eligible for an annual incentive bonus.

We know your well-being and happiness are key to a long and successful career. We are delighted to offer country specific benefits. Click here to access benefits specific to your location.

We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Formor please contact 1-855-833-5120.

Criminals may pose as recruiters asking for money or personal information. We never request money or banking details from job applicants. Learn more about spotting and avoiding scams here.

Please read our Candidate Privacy Policy.

We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.

USA Job Seekers:

EEO Know Your Rights.