SOC 2 Type II — CPA Audit Firm, Readiness Consultant, and Penetration Tester (Fintech

Title: SOC 2 Type II — CPA Audit Firm, Readiness Consultant, and Penetration Tester (Fintech / Bank-Facing Platform) About us: We operate a financial technology platform serving community banks, credit unions, and lending institutions. Client onboarding requires SOC 2 Type II attestation and independent penetration testing. We are hiring for up to three separate roles. Apply for whichever you're qualified for — note that independence rules prevent the same firm from performing readiness and the attestation. 1. CPA Firm — SOC 2 Type I and Type II attestation Licensed CPA firm in good standing (provide state and firm license number) Current AICPA peer review enrollment and most recent report result SOC 2 engagement volume — how many reports issued in the last 12 months Experience with reports consumed by bank third-party risk teams 2. Readiness Consultant Gap assessment against Trust Services Criteria (Security required; advise on Availability and Confidentiality) Build policies, procedures, and evidence collection workflows Implement a compliance automation platform (Vanta, Drata, or equivalent) Prepare responses to bank vendor due diligence questionnaires 3. Penetration Tester External network, web application, and API testing Cloud configuration review (AWS/Azure) OSCP, GPEN, or CREST certified Formal report suitable for distribution to institutional clients and regulators, plus remediation retest To apply: Specify which role. Include timeline, fixed-fee pricing where possible, and a redacted sample deliverable. CPA firms: license and peer review details are required for consideration.