Menu
Get Ready
SOC 2 Readiness AssessmentCompare service firms
SOC 2 Readiness FirmsPenetration Testing FirmsvCISO FirmsISO 27001 ConsultantsCompliance ConsultantsAll Service FirmsA monthly demand proxy from active postings on companies' own ATS career pages. We compare IT audit, compliance analyst, security compliance, and SOC 2 auditor role searches across the US, UK, and Canada.
These figures measure visible hiring demand, not the number of people working in SOC 2. We aggregate from a public job-postings index that crawls companies' own ATS career pages and matches title and department tokens, so each result is a proxy for a role family rather than an exact occupational census.
The role searches overlap and must be compared, not summed. The headline uses IT audit alone across three disjoint countries. The near absence of exact "SOC 2 auditor" titles is the useful finding: SOC 2 work is usually hired under broader IT audit, security compliance, and compliance roles.
We counted 4,861 active IT-audit job postings on company career sites across the US, UK, and Canada in 2026-06.
Source: SOC 2 Auditors, https://soc2auditors.org/data/compliance-hiring/#it-audit-job-postings-total (retrieved 2026-06-11). Across audit and compliance roles, IT audit is the most common (4,861). Dedicated "SOC 2 auditor" titles are rare (2); demand surfaces as the broader roles. These are separate keyword searches with overlapping coverage, so we compare them rather than add them up.
Source: SOC 2 Auditors, https://soc2auditors.org/data/compliance-hiring/#compliance-job-postings-by-role (retrieved 2026-06-11). The counts come from a public job-postings index that crawls active jobs published on companies' own applicant-tracking-system career sites, so the primary source is each company's own careers page. The pipeline runs one role-family query per country and records the index's matching count for the US, UK, and Canada.
This is a demand proxy based on token matching. It can include adjacent work where the matched tokens appear in a title or department, and it can miss relevant jobs described with different language. It is not a SOC 2 headcount, a labor-force survey, or a count of filled positions.
Country totals for the IT-audit headline can be added because the locations are disjoint. Role totals cannot be added because one posting may match more than one role search. We therefore show the roles side by side and use IT audit alone as the headline series.
Maintained by Peter Korpak. Questions, corrections, or a stale number? Email hello@soc2auditors.org and we will reply within two business days.
Cite freely with attribution. This dataset is published under CC BY 4.0. Each figure above has a stable anchor, a CSV where a breakdown exists, and a copyable citation.
See the topic in context on the SOC 2 statistics hub. Questions or corrections can go to hello@soc2auditors.org.
Compare firms by fit, pricing, location, and experience, or ask us to match your scope to a short list.