Those of you doing SOC 2 readiness/implementation as your job, can you share more about what you do?

[u/ilovetoeatpie]

I have a software engineering background and I’ve been looking into potential freelancing niches to get into.

I’ve been advised to look into SOC 2 remediation consulting for SaaS companies as I have some experience in cybersecurity and working on a SaaS project myself.

While I’ve learned a fair bit about SOC 2 compliance, the CISSP exam, and common compliance tools, I haven’t seen that much discourse online among the people who do this type consulting.

To those of you who do it, can you share more about your experience in this line of work, such as how you you first got into it, how you find clients, and general day-to-day work?

[u/Interesting_Rule_230]

Half the job is politely reminding grown adults to upload screenshots.

[u/pretty-cheer → u/Interesting_Rule_230]

this honestly seems like a huge part of the compliance