SOC 2 Type II Certification Consultant / Auditor for Dental SaaS Company

Dentistry Automation (dentistryautomation.com) is a dental technology company providing SaaS solutions to dental practices, including Revenue Cycle Management (RCM), insurance verification, claims processing, payment reconciliation, and other practice-management solutions. We are looking for an experienced **SOC 2 Type II professional/firm** to help us complete our SOC 2 Type II certification/audit. ## What We’re Looking For We need someone who can take us through the **full SOC 2 Type II process**, from readiness assessment through the final audit and issuance of the SOC 2 Type II report. The ideal candidate should have significant experience working with **SaaS/technology companies**, preferably healthcare or healthcare-adjacent organizations handling sensitive customer information. ### Scope of Work * Assess our current SOC 2 readiness and identify gaps * Review our existing policies, procedures, controls, and documentation * Help us remediate identified gaps and prepare for the audit * Assist with SOC 2 Trust Services Criteria, including: * Security * Availability * Confidentiality, where applicable * Processing Integrity, where applicable * Review and advise on technical and organizational controls * Help establish appropriate evidence collection and monitoring processes * Guide us through the required observation/testing period for Type II * Coordinate and conduct the SOC 2 Type II audit * Provide guidance on auditor requests and evidence * Deliver the final SOC 2 Type II attestation/report ## Important Requirement We are specifically looking for someone who can **perform or directly facilitate the actual SOC 2 Type II audit and issuance of the final SOC 2 Type II report**, not only a consultant who prepares documentation or provides a "SOC 2 readiness" package. If you are a consultant rather than an independent CPA firm/auditor, please clearly explain your role and your relationship with the organization that will ultimately perform the SOC 2 Type II examination. ## Ideal Experience * Proven experience completing SOC 2 Type II engagements * Experience with SaaS companies * Experience with healthcare, dental, HIPAA, or other regulated environments is highly preferred * Strong understanding of the AICPA Trust Services Criteria * Experience with companies handling PHI/PII or other sensitive data * Ability to work with a remote/international team * Strong understanding of security, access controls, risk management, incident response, business continuity, change management, vulnerability management, vendor management, and related SOC 2 controls * Experience with SOC 2 platforms such as Vanta, Drata, Secureframe, or similar is a plus ## Please Include in Your Proposal 1. Your experience conducting SOC 2 Type II audits 2. Whether you are an **auditor/CPA firm, consulting firm, or independent consultant** 3. The name and credentials of the organization that will issue the final SOC 2 Type II report 4. Examples of similar SaaS/healthcare clients you have worked with 5. Your recommended timeline from readiness assessment through final report 6. Estimated total cost, including audit fees and any other expected costs 7. The Trust Services Criteria you recommend we include in our engagement 8. The tools/platforms you typically use for SOC 2 engagements 9. Your availability to begin **Please do not apply if you only provide SOC 2 policy templates or documentation without being able to support the actual Type II audit/attestation process.** We are looking for a long-term partner who can help us achieve SOC 2 Type II and maintain our compliance program going forward.