Hands-on experience with SOC 2 audits and Trust Services Criteria and New York 23 NYCRR 500, or ... Strong analytical, organizational, and communication skills Preferred Certifications * Certified ...
Hands-on experience with SOC 2 audits and Trust Services Criteria and New York 23 NYCRR 500, or ... Strong analytical, organizational, and communication skills Preferred Certifications * Certified ...
Hands-on experience with SOC 2 audits and Trust Services Criteria and New York 23 NYCRR 500, or ... Strong analytical, organizational, and communication skills Preferred Certifications * Certified ...
Quick apply
Hands-on experience with SOC 2 audits and Trust Services Criteria and New York 23 NYCRR 500, or ... Strong analytical, organizational, and communication skills Preferred Certifications * Certified ...
Partner with internal and external auditors during annual SOC 1 Type II examinations. * Remediate ... Lead root-cause analysis investigations for systemic inventory discrepancies and variances. Client ...
Partner with internal and external auditors during annual SOC 1 Type II examinations. * Remediate ... Lead root-cause analysis investigations for systemic inventory discrepancies and variances. Client ...
Cybersecurity Administrator
Columbus, OH · On-site
Support cyber insurance, SOC 2, vendor risk assessments, audits, and security documentation. * Lead ... analytics. * Relevant certifications preferred: Security+, CySA+, SSCP, CISSP, or similar.
Cybersecurity Administrator
Columbus, OH · On-site
Support cyber insurance, SOC 2, vendor risk assessments, audits, and security documentation. * Lead ... analytics. * Relevant certifications preferred: Security+, CySA+, SSCP, CISSP, or similar.
Support cyber insurance, SOC 2, vendor risk assessments, audits, and security documentation. * Lead ... analytics. * Relevant certifications preferred: Security+, CySA+, SSCP, CISSP, or similar.
Support cyber insurance, SOC 2, vendor risk assessments, audits, and security documentation. * Lead ... analytics. * Relevant certifications preferred: Security+, CySA+, SSCP, CISSP, or similar.
Computer Network Defense Analyst
Columbus, OH · On-site
$90K - $130K/yr
Five (5) or more years supporting Cyber Network Defense (CND), SOC, Incident Response, or Defensive Cyber Operations. * Two (2) or more years of performing incident investigation, root cause analysis ...
Quick apply
Computer Network Defense Analyst
Columbus, OH · On-site
$90K - $130K/yr
Five (5) or more years supporting Cyber Network Defense (CND), SOC, Incident Response, or Defensive Cyber Operations. * Two (2) or more years of performing incident investigation, root cause analysis ...
Computer Network Defense Analyst
Columbus, OH · On-site
$90 - $120/hr
Five (5) or more years supporting Cyber Network Defense (CND), SOC, Incident Response, or Defensive Cyber Operations. * Two (2) or more years of performing incident investigation, root cause analysis ...
Computer Network Defense Analyst
Columbus, OH · On-site
$90 - $120/hr
Five (5) or more years supporting Cyber Network Defense (CND), SOC, Incident Response, or Defensive Cyber Operations. * Two (2) or more years of performing incident investigation, root cause analysis ...
Compliance Lead
Columbus, OH · On-site +1
$151K/yr
Own Avandra's compliance roadmap across HIPAA, HITRUST, and SOC 2; drive certification timelines ... Own the post-acquisition compliance integration playbook: gap analysis, remediation roadmap, and ...
Compliance Lead
Columbus, OH · On-site +1
$151K/yr
Own Avandra's compliance roadmap across HIPAA, HITRUST, and SOC 2; drive certification timelines ... Own the post-acquisition compliance integration playbook: gap analysis, remediation roadmap, and ...
Accessioner I
Dublin, OH · On-site
$14 - $19/hr
Catalog patient specimens, like blood, urine, or tissue, for analysis. * Process laboratory samples ... Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards ...
Quick apply
Accessioner I
Dublin, OH · On-site
$14 - $19/hr
Catalog patient specimens, like blood, urine, or tissue, for analysis. * Process laboratory samples ... Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards ...
Senior Data Engineer
Columbus, OH · On-site
$50 - $55/hr
Analyze target data structures and underlying systems. * Design data processing pipelines using the ... Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards ...
Quick apply
Senior Data Engineer
Columbus, OH · On-site
$50 - $55/hr
Analyze target data structures and underlying systems. * Design data processing pipelines using the ... Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards ...
Maintenance Mechanic
Columbus, OH · On-site
$21 - $26/hr
Problem solving and root cause analysis. * Safety awareness and regulatory compliance ... Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards ...
Quick apply
Maintenance Mechanic
Columbus, OH · On-site
$21 - $26/hr
Problem solving and root cause analysis. * Safety awareness and regulatory compliance ... Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards ...
Customer Care Representative
$15.50 - $21/hr
In fact, we are the first claims administrator to have earned SOC 2, Type 1 certification. The ... Ability to Analyze written and recorded communication Have the ability to receive, articulate ...
Customer Care Representative
$15.50 - $21/hr
In fact, we are the first claims administrator to have earned SOC 2, Type 1 certification. The ... Ability to Analyze written and recorded communication Have the ability to receive, articulate ...
Customer Care Representative
Dublin, OH · On-site
$15.50 - $21/hr
In fact, we are the first claims administrator to have earned SOC 2, Type 1 certification. The ... • Ability to Analyze written and recorded communication • Have the ability to receive ...
Customer Care Representative
Dublin, OH · On-site
$15.50 - $21/hr
In fact, we are the first claims administrator to have earned SOC 2, Type 1 certification. The ... • Ability to Analyze written and recorded communication • Have the ability to receive ...
Specimen Processor
Dublin, OH · On-site
$12 - $17/hr
Open specimens and pour off into secondary containers to prepare for analysis and testing. * Verify ... Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards ...
Quick apply
Specimen Processor
Dublin, OH · On-site
$12 - $17/hr
Open specimens and pour off into secondary containers to prepare for analysis and testing. * Verify ... Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards ...
Cybersecurity Analyst
Whitehall, OH · On-site
Current DoD 8570 IAT Level II certification (or higher), such as CompTIA Security+ CE, ISC2 SSCP ... as a SOC Security Analyst. * Education and experience requirements: * Level I: Bachelor's degree ...
Cybersecurity Analyst
Whitehall, OH · On-site
Current DoD 8570 IAT Level II certification (or higher), such as CompTIA Security+ CE, ISC2 SSCP ... as a SOC Security Analyst. * Education and experience requirements: * Level I: Bachelor's degree ...
Current DoD 8570 IAT Level II certification (or higher), such as CompTIA Security+ CE, ISC2 SSCP ... as a SOC Security Analyst. * Education and experience requirements: * Level I: Bachelor's degree ...
Current DoD 8570 IAT Level II certification (or higher), such as CompTIA Security+ CE, ISC2 SSCP ... as a SOC Security Analyst. * Education and experience requirements: * Level I: Bachelor's degree ...
Specimen Processor
Dublin, OH · On-site
$12 - $17/hr
Open specimens and pour off into secondary containers to prepare for analysis and testing. * Verify ... Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards ...
Quick apply
Specimen Processor
Dublin, OH · On-site
$12 - $17/hr
Open specimens and pour off into secondary containers to prepare for analysis and testing. * Verify ... Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards ...
Leverage technology, including data analysis tools and AI, to increase the efficiency and ... Ability to travel 25% * Experience performing SOC 1 or SOC 2 audits (strongly preferred)
Leverage technology, including data analysis tools and AI, to increase the efficiency and ... Ability to travel 25% * Experience performing SOC 1 or SOC 2 audits (strongly preferred)
Security Specialist (CIRC/SOC)
Columbus, OH · On-site
$74K - $128K/yr
Analyze alerts and violations; respond to and mitigate threats in real time. * Collaborate with ... Bachelor's degree OR Associates degree with 2 years relevant experience in system administration ...
Security Specialist (CIRC/SOC)
Columbus, OH · On-site
$74K - $128K/yr
Analyze alerts and violations; respond to and mitigate threats in real time. * Collaborate with ... Bachelor's degree OR Associates degree with 2 years relevant experience in system administration ...
Specimen Processor
Dublin, OH · On-site
$12 - $17/hr
Open specimens and pour off into secondary containers to prepare for analysis and testing. * Verify ... Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards ...
Quick apply
Specimen Processor
Dublin, OH · On-site
$12 - $17/hr
Open specimens and pour off into secondary containers to prepare for analysis and testing. * Verify ... Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards ...
Soc Two Analyst information
See salary details
$35.5K - $43.8K
2% of jobs
$43.8K - $52.1K
3% of jobs
$52.1K - $60.5K
12% of jobs
$60.5K - $68.8K
7% of jobs
$69.5K is the 25th percentile. Wages below this are outliers.
$68.8K - $77.1K
9% of jobs
$77.1K - $85.4K
5% of jobs
$85.4K - $93.7K
3% of jobs
$93.7K - $102K
6% of jobs
The median wage is $104.1K / yr.
$102K - $110.4K
6% of jobs
$110.4K - $118.7K
2% of jobs
$122.2K is the 75th percentile. Wages above this are outliers.
$118.7K - $127K
43% of jobs
$35.5K
$99.2K
$127K
How much do soc two analyst jobs pay per year?
What cities are hiring for Soc Two Analyst jobs?
Cities with the most Soc Two Analyst job openings:
What states have the most Soc Two Analyst jobs?
States with the most job openings for Soc Two Analyst jobs include:
What are the most commonly searched types of Soc Two Analyst jobs?
The most popular types of Soc Two Analyst jobs are:

Full-time
Medical, Dental, Vision, Retirement, PTO
Re-posted 5 days ago
APCO Holdings rating
8.0
Based on 10 frontline employees who took The Breakroom Quiz
167th of 311 rated insurance
Job description
APCO Holdings partners with dealerships across North America to deliver innovative vehicle protection products and services that enhance the ownership experience for customers and drive growth for our partners. Through our family of brands, we bring together industry expertise, technology, and data-driven insights to help dealers strengthen their finance and insurance performance and build lasting relationships with their customers.
Our teams work collaboratively across operations, technology, risk, finance, marketing, and sales to deliver solutions that create measurable value and support the continued growth of APCO and the partners we serve.
We are looking for a Senior Security Risk & Compliance Analyst to support and strengthen APCO's security governance, risk, and compliance (GRC) initiatives. In this role, you will help drive compliance efforts, assess security controls, identify risks, and support the organization's ongoing commitment to maintaining a strong security posture and regulatory compliance.
Audit & Compliance
- Support the planning, coordination, and execution of compliance audits, including readiness assessments and external audit engagements
- Partner with control owners to document, implement, and maintain compliance controls aligned control requirements.
- Collect, review, and validate audit evidence to ensure completeness and accuracy
- Track audit findings, exceptions, and remediation efforts through closure
- Act as a liaison between internal stakeholders and external auditors
Internal Audit
- Perform internal audits and control assessments to evaluate the effectiveness of security and compliance controls
- Develop audit plans, testing procedures, and audit reports
- Identify control gaps and recommend remediation actions
- Monitor and track remediation efforts to ensure timely resolution
GRC Platform Management
- Administer and maintain the organization's GRC platform
- Configure audit workflows and maintain accurate, up-to-date due diligence responses within the GRC platform.
- Ensure data integrity and accuracy within the system
- Generate dashboards and reports for compliance status, audit tracking, and risk posture
Risk Registration & Management
- Maintain the enterprise risk register, including identification, classification, and documentation of risks
- Facilitate risk assessments with business and IT stakeholders
- Evaluate risk severity based on likelihood and impact
- Track risk treatment plans (remediation, acceptance, transfer, avoidance)
- Provide regular reporting on risk posture to leadership
Governance & Cross-Functional Collaboration
- Collaborate with IT, Security, Legal, and business units to ensure alignment with compliance requirements
- Assist in the development and maintenance of security policies, standards, and procedures
- Support other compliance initiatives as needed (e.g., regulatory, customer security questionnaires)
- Bachelor's degree in Information Security, Information Systems, or related field (or equivalent experience)
- At least 5 years of experience in security compliance, audit, or GRC
- Hands-on experience with SOC 2 audits and Trust Services Criteria and New York 23 NYCRR 500, or other regulatory compliance.
- Experience with performing internal audits and control testing
- Familiarity with GRC tools (e.g., ServiceNow GRC, Archer GRC)
- Strong understanding of risk management principles and frameworks
- Knowledge of common frameworks (e.g., AICPA SOC 2, ISO 27001, NIST)
- Experience with leading cybersecurity due diligence activities, including responding to customer and partner security questionnaires accurately and in a timely manner
- Strong analytical, organizational, and communication skills
- Certified Information Systems Auditor (CISA) or
- Certified in Risk and Information Systems Control (CRISC) or
- Certified Information Systems Security Professional (CISSP)
- Enjoy identifying risks and improving security processes
- Thrive in cross-functional, collaborative environments
- Like balancing technical security concepts with governance and compliance
- Are motivated by protecting systems, data, and organizational integrity
- Competitive compensation
- Comprehensive medical, dental, and vision benefits
- 401(k) with company match
- Paid time off and company holidays
- Opportunities for professional growth and certification support
- A collaborative and security-focused work environment
What APCO Holdings employees say
Pay
Benefits
Hours and flexibility
Workplace
Get the full story on Breakroom
About APCO Holdings
Sourced by ZipRecruiter
Industry
Motor vehicle manufacturing
Company size
501 - 1,000 Employees
Headquarters location
Norcross, GA, US
Year founded
1984