TransUnion's Job Applicant Privacy Notice

What We'll Bring:

We are seeking a highly motivated and detail-oriented SOC 2 Oversight Lead to drive and maintain our SOC 2 compliance program. This role will serve as the primary liaison between internal control owners and external auditors, ensuring that all SOC 2 Trust Services Criteria are met consistently and effectively. The ideal candidate will have a strong background in IT compliance, risk management, and audit coordination.

What You'll Bring:

Key Responsibilities:

• Lead SOC 2 Compliance Program: Own the end-to-end SOC 2 Type II audit lifecycle, including readiness assessments, evidence collection, and remediation tracking.
• Audit Coordination: Serve as the primary point of contact for external auditors, managing timelines, deliverables, and communications.
• Control Owner Collaboration: Work closely with internal control owners across departments to ensure controls are well-designed, implemented, and operating effectively.
• Documentation & Evidence Management: Maintain accurate and up-to-date documentation of controls, policies, and procedures. Ensure timely and complete evidence collection.
• Risk Identification & Remediation: Identify gaps or weaknesses in controls and drive remediation efforts in collaboration with stakeholders.
• Continuous Improvement: Monitor changes in the regulatory landscape and recommend enhancements to the compliance program.
• Training & Awareness: Educate internal teams on SOC 2 requirements and foster a culture of compliance and security.

Impact You'll Make:

Qualifications:

• Bachelor’s degree in Information Security, Information Systems, or a related field.
• 8+ years of experience in IT compliance, audit, or risk management, with at least 4 years of experience in SOC 2.
• Strong understanding of SOC 2 Trust Services Criteria and common control frameworks (e.g., NIST, ISO 27001).
• Experience working with external auditors and managing audit engagements.
• Excellent project management, communication, and interpersonal skills.
• Ability to translate technical concepts into business language and vice versa.
• Familiarity with GRC tools and evidence management platforms is a plus.
• Relevant certifications (e.g., CISA, CISSP, CRISC) are a plus.

This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

TransUnion Job Title

Advisor, InfoSec Risk Management & Governance