職位描述
My client, a SaaS company of roughly 30 staff, has completed all consulting, control design, and implementation work for their SOC 2 program and is now ready for the formal Type II report (controls tested over a period of time). All supporting policies, risk-assessment documentation, and evidence folders are organised in a secure SharePoint and can be shared immediately.
What I still require is an independent, AICPA-licensed practitioner who can:
• Plan and perform the Type II fieldwork over the defined review period
• Test operating effectiveness of each control, request any additional evidence, and document results
• Draft the management assertion letter and the final SOC 2 Type II report, including opinion and complementary user-entity controls
• Walk through any follow-up questions with my client’s customers or stakeholders until the report is accepted
I
---
來源:Freelancer.com | 出價次數:29 | 剩餘時間:6 日 | 專案類型:固定預算