---
title: 'Information Security Associate  -Senior Associate System and Organization Controls (SOC 1 / SOC 2) Compliance at Tevora'
canonical: 'https://feeny.ai/job/information-security-associate-senior-associate-system-and-organization-wca7azmdx9bw'
type: 'job'
last_seen: '2026-10-18'
---

# Information Security Associate  -Senior Associate System and Organization Controls (SOC 1 / SOC 2) Compliance at Tevora

- **Company:** Tevora
- **Location:** Irvine, CA
- **Compensation:** $84k–$96k
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-10-06
- **Last confirmed live:** 2026-10-18
- **Apply:** https://jobs.lever.co/tevora/9d3c1b75-941c-4194-a2da-d24d7ef21980

## Job description

Information Security Associate - Senior Associate System and Organization Controls (SOC 1 / SOC 2) Compliance at Tevora Irvine, CA or Fairfax, VA

If you haven't heard of Tevora, it's because we've done our job! Tevora is a tight-knit community of professionals with a shared passion for our craft. Every day, we combine in-depth knowledge of cybersecurity, technology, and compliance to help create more secure digital environments. To Tevorans, every problem is a puzzle in need of solving. We strongly believe that if we put smart, driven people in a room together, they will accomplish great things. We maintain a supportive culture that celebrates continuous learning, diverse perspectives, and sharing the wins. That's why we have our eyes on you.

What's the role? Tevora is seeking an Information Security Associate -Senior Associate to join the SOC Compliance team. This role on the SOC Compliance team is looking for a passionate individual who can apply solid Cyber Security fundamentals, who has a solid professional demeanor, and who knows how to learn by doing.

This role will be responsible for supporting assessments of AICPA’s System and Organization Controls (SOC) compliance, for SOC 1 and SOC 2, on a wide variety of client projects for some of the world's largest organizations. Other compliance frameworks this role will work on may include ISO 27001, HITRUST, C5, and PCI as well as GRC support for clients. This role will also provide internal content to improve practice processes and participate in ongoing training opportunities. The successful candidate for this role will be detail-oriented, have a solution-focused attitude, and possess strong written and verbal communication skills.

A day in the life could include:

- Participating in IT and Compliance assessments, audits, gap analyses, and remediation.
- Actively contributing to projects in the areas of System and Organization Controls (SOC 1 & SOC 2) Compliance assessments.
- Communicating with Tevora project leads and project stakeholders to effectively convey questions, updates, and the needs of a project.
- Supporting various information security compliance projects, such as HITRUST, C5, PCI, or ISO gap assessments.
- Assisting in the development of customized policies, procedures, controls, disaster recovery plans, and other documentation for applications, systems, and infrastructure for our clients.
- Identifying policy or compliance exceptions for Clients, including working directly with the teams to document exceptions, and identifying compensating controls and remediation action plans.
- Additional duties as assigned.

Necessary skills and qualifications:

- Have knowledge of security policy frameworks and control design.
- Have knowledge of security architecture, network, and systems design.
- Completed a minimum of 1 year of experience in information security, information technology, business consulting, enterprise risk, or compliance field.
- Possess knowledge of common IT and security concepts such as firewall management, server management, access control, and authentication.
- Ability to connect easily with clients and colleagues to communicate effectively across business and technical boundaries- to translate between technical and business communities.
- Ability to work independently with minimal guidance.
- Proficient in writing executive-level reports and technical documentation.
- Commitment to continued learning.
- Proficient in MS Office tools and basic professional acumen.
- At least One Professional Certification completed or in progress (Sec +, CCNA, ISO Lead Implementer, etc.).

Bonus Points:

- Hold a bachelor’s degree from an accredited 4-year university
- Demonstrated experience in at least 1 year of SOC 2 Compliance assessments
- Demonstrated experience in at least one other information security compliance assessment (ISO 27001, PCI Level 1, HITRUST)
- Hold at least one Auditing, Risk, or IT certification from the following list: CISSP, CISA, CISM, CRISC, ISO Lead Auditor.
- Prior or current CPA license

We've got you covered!

- Comprehensive benefits offering
- Paid time off and holidays
- 401K with Company discretionary match
- Vibrant work culture

Additinal Requirments:

- Eligibility to work in the United States.

EEOC Statement Tevora is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, disability status, or other applicable legally protected characteristics.

## About Tevora

## Company Overview
- **One-liner**: Tevora is a specialized management consultancy focused on cybersecurity, risk, and compliance services, primarily supporting Chief Information Security Officers (CISOs).
- **Entity Type**: Private (funding stage not disclosed)
- **Headquarters**: Irvine, California, United States (additional office in Fairfax, Virginia)
- **Founded**: 2003
- **Founders**: Not publicly available

## Core Business
- Primary industry: Cybersecurity, risk management, and compliance consulting
- Target customers: B2B – mid-market to enterprise organizations, with a focus on CISOs and security leaders
- Mission statement: “We are a cybersecurity and compliance consultancy focused on supporting the Chief Information Security Officer. Our sole objective is to help keep your organization compliant, and your brand safe.” [tevora.com/about](https://www.tevora.com/about/)

## Products & Services
Tevora offers a suite of consulting services rather than standalone products. Major service lines include:

- **AI Security & Compliance**: Helping clients navigate new AI-related compliance frameworks and associated security challenges. [tevora.com](https://www.tevora.com/)
- **Compliance Assessments & Automation**: Streamlining compliance processes across multiple frameworks (e.g., SOC 2, ISO 27001, PCI DSS) to reduce internal burden.
- **Threat Management & Response**: Proactive penetration testing, social engineering, and incident response services to identify and remediate vulnerabilities. [tevora.com](https://www.tevora.com/)
- **Technology Consulting & Implementation**: Vendor-agnostic guidance to select and deploy the best-fit security tools across hundreds of solutions.
- **Risk & Strategic Services**: Enterprise risk management, third-party risk management, business continuity/disaster recovery exercises, and executive-level CISO support. [tevora.com](https://www.tevora.com/)
- **CISO Support**: Flexible Governance, Risk & Compliance (GRC) support, DevSecOps assistance, and fractional CISO services to supplement internal teams. [tevora.com/about](https://www.tevora.com/about/)

## Market Standing
- **Valuation**: Not disclosed
- **Key Metric**: Over 2,000 clients served and 10,000+ audits performed, with 20+ years of experience supporting CISOs. [tevora.com](https://www.tevora.com/)
- **Notable Investors/Partners**: Not publicly available
- **Growth Signals**: Maintains a hybrid workforce with offices in Irvine, CA and Fairfax, VA; employs 189 people (as of latest Built In profile). The company emphasizes continuous growth and has a structured Consultant Development Program (CDP) internship for aspiring cybersecurity professionals. [builtin.com](https://builtin.com/company/tevora)

## Competitive Advantages
- **Vendor-agnostic stance**: Tevora takes a neutral approach to technology selection, helping clients find the best solution without bias. [tevora.com](https://www.tevora.com/)
- **CISO-centric focus**: Entire practice is built around supporting the Chief Information Security Officer, offering both strategic and hands-on expertise.
- **Full-service security & compliance**: Covers the entire lifecycle from assessment to implementation to ongoing management, including emerging areas like AI security.
- **Veteran owned**: The company values military experience and is veteran-owned, contributing to a disciplined, mission-driven culture. [tevora.com/careers](https://www.tevora.com/careers/)

## Strategic Focus
- **AI-driven security & compliance**: Actively pioneering security programs that account for new AI-related compliance frameworks and threat vectors. [tevora.com](https://www.tevora.com/)
- **Continuous compliance**: Moving beyond one-time assessments to help clients achieve and maintain continuous compliance through automation and ongoing support.
- **Talent development**: Investing in the Consultant Development Program and professional development to build a pipeline of expert cybersecurity consultants. [tevora.com/careers](https://www.tevora.com/careers/)

## Why Work Here
- **Culture**: Described as a team of “A players” with mutual support, trust, and a passion for client success. Emphasizes collaboration, innovation, and a commitment to diversity and inclusion. [tevora.com/careers](https://www.tevora.com/careers/)
- **Work model**: Hybrid – employees engage in a combination of remote and on-site work. Offices in Irvine, CA and Fairfax, VA. [builtin.com](https://builtin.com/company/tevora)
- **Benefits**: 401k matching, health/vision/dental insurance, vacation and paid time off, company equity. [tevora.com/careers](https://www.tevora.com/careers/)
- **Professional development**: Structured Consultant Development Program (10‑week internship for students/recent graduates), training resources, and career growth support. [tevora.com/careers](https://www.tevora.com/careers/)
- **Veteran & diversity focus**: Veteran-owned with an active commitment to creating an inclusive environment where every human being can thrive. [tevora.com/careers](https://www.tevora.com/careers/)

## Sources
1. [tevora.com/careers](https://www.tevora.com/careers/)
2. [tevora.com](https://www.tevora.com/)
3. [tevora.com/about](https://www.tevora.com/about/)
4. [jobs.lever.co/tevora](https://jobs.lever.co/tevora)
5. [builtin.com/company/tevora](https://builtin.com/company/tevora)

## Other roles at Tevora

- [Account Director](https://feeny.ai/job/account-director-tevora-seattle-1h01yfdmws3n) — Seattle, WA
- [Managing Director – Compliance Services](https://feeny.ai/job/managing-director-compliance-services-tevora-irvine-15n7d16h8tbj) — Irvine, CA
- [Senior Director – Cybersecurity Transformation & AI Security](https://feeny.ai/job/senior-director-cybersecurity-transformation-ai-security-tevora-irvine-7kqr7mneprx6) — Irvine, CA
- [Cybersecurity Internship Winter  2027 - Threat](https://feeny.ai/job/cybersecurity-internship-winter-2027-threat-tevora-irvine-ctjcrtjmp38n) — Irvine, CA
- [Cybersecurity Internship Winter 2027 - Solutions](https://feeny.ai/job/cybersecurity-internship-winter-2027-solutions-tevora-irvine-b1j9fdrxxa4f) — Irvine, CA
- [Cybersecurity Internship Winter 2027 - Systems and Organizations Controls (SOC)](https://feeny.ai/job/cybersecurity-internship-winter-2027-systems-and-organizations-controls-soc-v8fhznfmt32v) — Irvine, CA
- [Cybersecurity Internship Winter 2027 - Payments](https://feeny.ai/job/cybersecurity-internship-winter-2027-payments-tevora-fairfax-sr5kh0xjjrye) — Fairfax, VA
- [Cybersecurity Internship Winter 2027 - International Organization for Standardization (ISO)](https://feeny.ai/job/cybersecurity-internship-winter-2027-international-organization-for-61jvedy4wjcw) — Irvine, CA
- [Cybersecurity Internship Winter 2027 - Healthcare](https://feeny.ai/job/cybersecurity-internship-winter-2027-healthcare-tevora-irvine-spbbym4ehs24) — Irvine, CA
- [Cybersecurity Internship Winter 2027 - Federal](https://feeny.ai/job/cybersecurity-internship-winter-2027-federal-tevora-fairfax-m3w21ncyfr9t) — Fairfax, VA