Commercial Assurance Senior Consultant

About the Company

Fortreum is a trusted leader in cloud and cybersecurity services, ranked among the Top 5 FedRAMP Third Party Assessment Organizations (3PAO). We deliver independent, third-party, vendor-agnostic regulatory assessment and advisory services, alongside advanced cybersecurity offensive and compliance technical solutions.

Responsibilities

• Independently conduct control assessments on SOC 2 Categories and ISO/IEC 27001 Management Clauses and Annex A controls
• Evaluate information system boundaries through interviews, descriptions, and diagrams
• Develop engagement testing plans, including interview schedules and requests for information
• Complete AICPA required documents and ISO/IEC 27001 audit documentation
• Conduct interviews with key stakeholders and technical personnel
• Develop final SOC reports and ISO certification audit deliverables
• Manage project priorities and tasks to achieve delivery utilization targets
• Perform project out briefs with clients to communicate compliance outcomes
• Mentor junior staff on interviewing, examination, and testing techniques

Requirements

• Bachelor's Degree or equivalent job experience
• 5+ years of professional services experience
• 3+ years of consulting experience assessing systems against SOC and ISO
• Strong technical acumen regarding cloud security
• Familiarity with IaaS providers such as AWS, GCP, and Azure
• Deep understanding of SOC 2 Categories and ISO/IEC 27001 Management Clauses 4-10 and Annex A controls

Preferred Qualifications

• Ability to be self-directed with little oversight
• Ability to manage multiple priorities simultaneously
• Proven analytical and problem-solving skills
• Ability to develop and maintain strong relationships with team members and clients
• Comfortable supporting fast-paced team environments

Benefits

• Medical, dental, and vision insurance
• 401K plan with a 4% match
• Company paid short-term and long-term disability
• Company paid AD&D and life insurance
• Flex time off and eleven paid holidays
• Annual bonuses and training stipends
• Certification reimbursements
• Access to over 30,000 free online training courses
• Personal cell phone allowance
• New hire and annual home office stipend