• Lead SOC 2 Type II readiness engagements using AICPA SOC for Service Organizations guidance • Conduct gap assessments, control maturity reviews, and remediation planning aligned with the Trust Services Criteria • Design, review, and enhance controls based on the COSO Internal Control Integrated Framework • Develop or refine security policies, procedures, and governance documentation • Prepare and validate audit evidence based on AICPA audit evidence standards • Configure and optimize Drata for automated evidence collection, control mapping, and audit readiness • Align technical and operational controls with secure architecture frameworks • Guide clients through risk assessments, vendor oversight, incident response planning, and logging and monitoring practices