Information Security Associate - Senior Associate - SOC 1 / SOC 2, Compliance
About the job
- Knowledge of security policy frameworks and control design.
- Knowledge of security architecture, network, and systems design.
- At least one year of experience in information security, information technology, business consulting, enterprise risk, or compliance.
- Knowledge of common IT and security concepts, including firewall management, server management, access control, and authentication.
- Ability to work independently with minimal guidance.
- Proficiency in writing executive-level reports and technical documentation.
- Proficiency with Microsoft Office tools and basic professional acumen.
- At least one professional certification completed or in progress, such as Security+, CCNA, or ISO Lead Implementer.
- Participate in IT and compliance assessments, audits, gap analyses, and remediation.
- Contribute to projects involving SOC 1 and SOC 2 compliance assessments.
- Communicate questions, updates, and project needs to project leads and stakeholders.
- Support information security compliance projects, including HITRUST, C5, PCI, and ISO gap assessments.
- Assist in developing customized policies, procedures, controls, disaster recovery plans, and other documentation for client applications, systems, and infrastructure.
- Identify client policy or compliance exceptions, document exceptions with relevant teams, and identify compensating controls and remediation action plans.
- Provide internal content to improve practice processes and participate in ongoing training opportunities.
- A bachelor's degree from an accredited four-year university.
- At least one year of experience in SOC 2 compliance assessments.
- At least one other information security compliance assessment experience, such as ISO 27001, PCI Level 1, or HITRUST.
- At least one auditing, risk, or IT certification, such as CISSP, CISA, CISM, CRISC, or ISO Lead Auditor.
- A prior or current CPA license.
About the company
Tevora provides specialized management consulting focused on cybersecurity, risk, and compliance. It helps CISOs protect their organizations’ digital assets by delivering tailored advisory and hands-on support that builds and strengthens security programs. The company guides security teams through assessments, governance, risk management, and incident response, translating each organization's unique pressures into practical solutions and ongoing improvements. Unlike firms that offer one-size-fits-all advice, Tevora emphasizes a close, collaborative partnership with the CISO, applying cumulative learnings from many engagements to continuously boost defenses. The goal is to empower organizations to prevent and respond to daily threats with the right tools and guidance, now and in the future.
Company Size
51-200
Company Stage
N/A
Total Funding
N/A
Headquarters
Lake Forest, Illinois
Founded
2003
Get referred to Tevora
See people who can refer or advise you
Simplify's Take
What believers are saying
- August 11, 2026 Inc. 5000 recognition strengthens Tevora’s sales story and recruiting.
- June 15, 2026 Fairfax expansion signals rising East Coast demand and client proximity needs.
- CMMC readiness, AI security, and compliance demand support near-term consulting pipeline growth.
What critics are saying
- Crowded cybersecurity consulting rivals undercut Tevora’s margins on PCI, SOC, and ISO work.
- CrowdStrike, platform vendors, and internal security teams absorb advisory budgets by bundling compliance automation.
- Tevora’s boutique scale leaves it vulnerable if CMMC or federal consulting demand stalls.
What makes Tevora unique
- Tevora combines cybersecurity, risk, and compliance consulting with CMMC RPO and C3PAO capabilities.
- Tevora stayed on the Inc. 5000 for twelve straight years, signaling durable client demand.
- Tevora markets vendor-agnostic, CISO-focused advisory across PCI, SOC, ISO, HITRUST, and FedRAMP.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Paid Vacation
- Paid Sick Leave
- Paid Holidays
- 401(k) Company Match