Auditor Directory
SOC 2 Auditors
System and Organization Controls 2
Browse accredited firms offering SOC 2 audits. Filter by location, size, and budget.
522 firms — interactive filtering loads below.
A-LIGN
Tampa, FL
A-LIGN is one of the largest and most recognized compliance audit firms in the United States. Profile includes pricing, framework coverage, reviews, and engagement process.
Aon Cyber Solutions UK
London, United Kingdom
Aon Cyber Solutions UK offers ISO 27001, SOC 2, and PCI DSS assessments with cyber insurance integration.
Atos Cybersecurity
Paris, France
Atos Cybersecurity is a global IT services company offering enterprise-grade ISO 27001, SOC 2, and NIS2 compliance.
Baker Tilly
Chicago, Illinois
Baker Tilly is a top-10 global advisory CPA firm network with 43,000+ professionals in 141 countries, serving mid-market and growth companies.
BDO Canada
Toronto, ON
BDO Canada is a leading national CPA firm offering SOC, SOX, ISO 27001, and PIPEDA compliance audits.
BDO International
Brussels, Belgium
BDO is the fifth-largest professional services network globally, providing audit, tax, and advisory services through member firms in over 160 countries.
Bridewell Consulting
Reading, United Kingdom
Bridewell Consulting is a UK cybersecurity firm offering ISO 27001, SOC 2, PCI DSS, and NIS2 assessments.
BSI Group
London, UK
BSI Group is the world's first national standards body and largest ISO certification body, offering ISO 27001, ISO 27701, SOC 2, and Cyber Essentials audits globally.
BSI Group
London, United Kingdom
BSI Group is the world's leading standards and certification body, providing ISO 27001, ISO 22301, and other management system certifications globally.
CGI Cybersecurity
Paris, France
CGI Cybersecurity offers enterprise-grade compliance services across ISO 27001, SOC 2, NIS2, and more.
Citrin Cooperman
New York, NY
Citrin Cooperman is a Top 25 CPA firm offering comprehensive SOC, SOX, HIPAA, and ISO 27001 audit services.
CliftonLarsonAllen
Minneapolis, MN
CliftonLarsonAllen is a Top 10 CPA firm offering SOC, SOX, HIPAA, FedRAMP, and ISO 27001 audits.
CliftonLarsonAllen LLP
Minneapolis, MN
CliftonLarsonAllen (CLA) is a top-eight US CPA firm headquartered in Minneapolis, offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, and CMMC audit services nationally.
Coalfire
Westminster, Colorado
Coalfire is a leading US cybersecurity advisory and audit firm specializing in FedRAMP, SOC 2, PCI DSS, HITRUST, and CMMC for cloud and technology companies.
CohnReznick Advisory
New York, NY
CohnReznick Advisory is a Top 25 CPA firm offering SOC, SOX, and FedRAMP compliance audits.
Crowe Global
New York, United States
Crowe Global is a top-10 global accounting network providing audit, tax, and advisory services through member firms in over 145 countries worldwide.
DarkMatter Group
Abu Dhabi, UAE
DarkMatter Group is a UAE cybersecurity firm offering ISO 27001, SOC 2, and NESA compliance assessments.
Deloitte
London, United Kingdom
Deloitte is the world's largest professional services firm, offering audit, assurance, tax, and advisory services across 150+ countries worldwide.
Deloitte Australia
Sydney, Australia
Deloitte Australia is a Big Four professional services firm providing SOC 2, ISO 27001, IRAP, Essential Eight, and enterprise risk advisory services to Australia's largest organizations across government, financial services, and technology.
Deloitte Canada
Toronto, Canada
Deloitte Canada is the country's largest Big Four professional services firm, providing SOC 2, ISO 27001, PIPEDA, SOX, and enterprise risk advisory services across financial services, technology, energy, and government sectors.
Deloitte Haskins & Sells LLP
Mumbai, India
Deloitte Haskins & Sells is Deloitte's primary India affiliate, offering SOC 1, SOC 2, ISO 27001, DPDPA, and compliance audit services across India.
Deloitte India
Mumbai, India
Deloitte India is a Big Four professional services firm providing SOC 2, ISO 27001, DPDPA, SOX, and comprehensive risk advisory services to India's largest corporations and multinational subsidiaries.
Deloitte Middle East
Dubai, UAE
Deloitte Middle East is the region's largest professional services firm, providing Big Four audit, assurance, and advisory services across the MENA region.
Deloitte Singapore
Singapore
Deloitte Singapore is a Big Four professional services firm providing SOC 2, ISO 27001, PDPA, MTCS, and enterprise risk advisory services to major corporations and government agencies across Singapore and Southeast Asia.
Deloitte Tohmatsu
Tokyo, Japan
Deloitte Tohmatsu is Deloitte's Japanese member firm and one of Japan's largest audit firms, providing Big Four services including J-SOX and ISMAP compliance.
Deloitte Touche Tohmatsu Brazil
Sao Paulo, Brazil
Deloitte Brazil is the largest professional services firm in Latin America, offering SOC 1, SOC 2, ISO 27001, LGPD, and compliance audit services.
Eide Bailly
Fargo, ND
Eide Bailly is a Top 25 CPA firm offering SOC, SOX, HIPAA, and ISO 27001 audit services.
ElevenPaths (Telefonica Cyber)
Madrid, Spain
ElevenPaths (Telefonica Cyber) offers ISO 27001, PCI DSS, and ENS compliance across Europe and Latin America.
Ensign InfoSecurity
Singapore
Ensign InfoSecurity is Singapore's largest cybersecurity firm offering ISO 27001, SOC 2, and MTCS assessments.
Ernst & Young (EY)
London, United Kingdom
EY is a Big Four professional services firm providing audit, assurance, tax, consulting, and strategy services across more than 150 countries worldwide.
Ernst & Young Brazil
Sao Paulo, Brazil
EY Brazil is Ernst & Young's Brazilian member firm offering SOC 1, SOC 2, ISO 27001, LGPD, and compliance audit services across Brazil.
EY Australia
Sydney, Australia
EY Australia is a Big Four professional services firm providing SOC 2, ISO 27001, IRAP, Essential Eight, and enterprise risk advisory services across financial services, technology, and government sectors in Australia.
EY France
Paris, France
EY France is a Big Four professional services firm providing ISO 27001, GDPR, HDS, SOC 2, and enterprise risk advisory services to French enterprises across financial services, technology, and manufacturing.
EY Germany
Stuttgart, Germany
EY Germany is a Big Four professional services firm providing ISO 27001, C5, TISAX, SOC 2, and GDPR compliance services to German enterprises, automotive companies, and financial institutions.
EY India
Mumbai, India
EY India is the largest Big Four operation in India by headcount, providing SOC 2, ISO 27001, DPDPA, SOX, and comprehensive risk advisory services across all major industries.
EY Japan
Tokyo, Japan
EY Japan (EY ShinNihon) provides Big Four audit, assurance, and advisory services with expertise in J-SOX, ISMAP, and Japanese regulatory compliance.
EY MENA
Dubai, UAE
EY MENA provides Big Four audit, assurance, tax, and advisory services across the Middle East and North Africa with offices in 15+ MENA countries.
EY Singapore
Singapore
EY Singapore provides Big Four audit, assurance, and advisory services with strong cybersecurity and regulatory compliance capabilities for the ASEAN market.
Forvis Mazars (US)
Springfield, Missouri
Forvis Mazars is a top-10 US professional services firm formed from the merger of BKD and Dixon Hughes Goodman, now part of the Mazars global network.
Grant Thornton
London, United Kingdom
Grant Thornton is a leading global professional services network providing audit, tax, and advisory services through member firms in over 140 countries.
Grant Thornton LLP
Chicago, IL
Grant Thornton US is a top-seven national CPA firm offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, FedRAMP, and CMMC audit services for mid-market and enterprise companies.
GuidePoint Security
Herndon, VA
GuidePoint Security offers SOC 2, ISO 27001, FedRAMP, and CMMC compliance assessments.
HCLTech Cybersecurity
Noida, India
HCLTech Cybersecurity provides enterprise compliance services across ISO 27001, SOC, PCI DSS, and NIST.
Help AG
Dubai, UAE
Help AG is one of the largest cybersecurity firms in the Middle East offering ISO 27001, SOC 2, and NESA assessments.
KPMG
Amstelveen, Netherlands
KPMG is a Big Four professional services firm providing audit, tax, and advisory services through a global network spanning 143 countries and territories.
KPMG Australia
Sydney, Australia
KPMG Australia provides Big Four audit, assurance, and cybersecurity services with deep expertise in APRA, CPS 234, and Australian regulatory compliance.
KPMG AZSA LLC
Tokyo, Japan
KPMG AZSA (KPMG Japan) is a Big Four audit firm providing SOC 2, ISO 27001, APPI, ISMAP, and enterprise risk advisory services to Japan's largest corporations across technology, manufacturing, and financial services.
KPMG Brazil
Sao Paulo, Brazil
KPMG Brazil is KPMG's Brazilian member firm offering SOC 1, SOC 2, ISO 27001, LGPD, and compliance audit services for enterprises and mid-market companies.
KPMG Canada
Toronto, Canada
KPMG Canada is a Big Four professional services firm providing SOC 2, ISO 27001, PIPEDA, SOX, and enterprise risk advisory services to Canadian organizations across financial services, technology, energy, and government.
KPMG China
Beijing, China
KPMG China is one of China's largest Big Four firms, providing audit, assurance, and advisory services with expertise in Chinese regulatory compliance.
KPMG India
Mumbai, India
KPMG India is a Big Four professional services firm providing SOC 2, ISO 27001, DPDPA, and enterprise risk advisory services to India's largest organizations across financial services, technology, and government sectors.
KPMG Lower Gulf
Dubai, UAE
KPMG Lower Gulf is KPMG's UAE and Oman practice, providing Big Four audit, assurance, tax, and advisory services across the Gulf region.
KPMG Singapore
Singapore
KPMG Singapore is KPMG's ASEAN hub, providing Big Four audit, assurance, tax, and advisory services with strong regulatory and compliance expertise.
Kroll
New York, New York
Kroll is a global risk and financial advisory firm providing cybersecurity, compliance, and investigation services with deep expertise in digital forensics.
Kroll (UK)
London, United Kingdom
Kroll UK is a global risk advisory firm offering ISO 27001, SOC 2, PCI DSS, and enterprise-grade compliance assessments.
Kudelski Security
Lausanne, Switzerland
Kudelski Security is a Swiss cybersecurity firm offering ISO 27001, SOC 2, and PCI DSS assessments globally.
LAC Co., Ltd.
Tokyo, Japan
LAC is one of Japan's largest cybersecurity firms offering ISO 27001, ISMS, and PCI DSS assessments.
LRQA
London, United Kingdom
LRQA is a global assurance and certification provider specializing in ISO 27001, ISO 22301, cybersecurity, and management system certifications worldwide.
LTIMindtree Cybersecurity
Mumbai, India
LTIMindtree Cybersecurity offers enterprise-grade ISO 27001, SOC 2, and PCI DSS compliance services.
Mandiant Germany
Munich, Germany
Mandiant Germany offers ISO 27001, BSI C5, and NIS2 compliance for enterprise clients.
Mazars
Paris, France
Mazars is an international audit, tax, and advisory firm operating as an integrated partnership across 95+ countries with 47,000+ professionals.
McGrathNicol Cyber
Sydney, Australia
McGrathNicol Cyber offers IRAP, ISO 27001, and SOC 2 assessments for Australian enterprises and government agencies.
mnemonic AS
Oslo, Norway
mnemonic is Norway's largest cybersecurity firm offering ISO 27001, SOC 2, and NIS2 compliance assessments.
NCC Group (US)
New York, NY
NCC Group is a global cybersecurity consultancy offering SOC 2, ISO 27001, PCI DSS, and FedRAMP assessments.
Nixu Oyj
Helsinki, Finland
Nixu Oyj is a leading Nordic cybersecurity firm offering ISO 27001, SOC 2, NIS2, and GDPR compliance assessments.
NRI SecureTechnologies
Tokyo, Japan
NRI SecureTechnologies is a leading Japanese cybersecurity firm offering ISO 27001, PCI DSS, and ISMS assessments.
NSFOCUS Technologies
Beijing, China
NSFOCUS is a leading Chinese cybersecurity firm offering ISO 27001, MLPS, and PCI DSS assessments.
Optiv Security
Denver, CO
Optiv Security is one of the largest cybersecurity solutions firms offering SOC 2, ISO 27001, HITRUST, and FedRAMP.
PricewaterhouseCoopers (PwC)
London, United Kingdom
PwC is one of the Big Four professional services firms, providing audit, assurance, tax, and consulting services to major organizations in 152 countries.
PricewaterhouseCoopers Brazil
Sao Paulo, Brazil
PwC Brazil is PricewaterhouseCoopers' Brazilian member firm offering SOC 1, SOC 2, ISO 27001, LGPD, and compliance audit services for Latin America's largest market.
Protiviti
Menlo Park, California
Protiviti is a global consulting firm specializing in internal audit, risk management, and compliance with 9,000+ professionals across 25+ countries.
PwC Aarata LLC
Tokyo, Japan
PwC Aarata (PwC Japan) is a Big Four audit firm providing SOC 2, ISO 27001, APPI, ISMAP, and enterprise risk advisory services to Japan's leading corporations across financial services, technology, and manufacturing.
PwC Australia
Sydney, Australia
PwC Australia is one of Australia's largest professional services firms, providing Big Four audit, assurance, and cybersecurity services across Oceania.
PwC Canada
Toronto, Canada
PwC Canada is a Big Four professional services firm providing SOC 2, ISO 27001, PIPEDA, SOX, and enterprise risk advisory services to Canada's largest organizations across financial services, technology, energy, and government.
PwC China
Shanghai, China
PwC China is the largest Big Four firm in China, providing audit, assurance, and advisory services with deep expertise in Chinese regulatory compliance.
PwC France
Paris, France
PwC France is a Big Four professional services firm providing ISO 27001, GDPR, HDS, SOC 2, and enterprise risk advisory services to French enterprises across financial services, technology, healthcare, and government.
PwC Germany
Frankfurt, Germany
PwC Germany is a Big Four professional services firm providing ISO 27001, C5, TISAX, SOC 2, and GDPR compliance services to German enterprises across automotive, manufacturing, technology, and financial services.
PwC India
Mumbai, India
PwC India is a Big Four professional services firm providing SOC 2, ISO 27001, DPDPA, SOX, and enterprise risk advisory services to India's largest corporations and multinational subsidiaries.
PwC Middle East
Dubai, UAE
PwC Middle East is a Big Four professional services firm providing SOC 2, ISO 27001, NESA, PDPL, and enterprise risk advisory services across the UAE, Saudi Arabia, and the broader Middle East region.
PwC Singapore
Singapore
PwC Singapore is a Big Four professional services firm providing SOC 2, ISO 27001, PDPA, MTCS, and enterprise risk advisory services to financial institutions, technology companies, and government agencies in Singapore and the APAC region.
QI-ANXIN Technology
Beijing, China
QI-ANXIN is one of China's largest cybersecurity firms offering ISO 27001, MLPS, and PIPL compliance.
Reply Cyber Security
Turin, Italy
Reply Cyber Security is a European IT consultancy offering ISO 27001, SOC 2, and NIS2 compliance for enterprises.
RSM International
London, United Kingdom
RSM International is the sixth-largest global professional services network, delivering audit, tax, and consulting services across 120+ countries.
RSM US LLP
Chicago, IL
RSM US LLP is the fifth-largest US CPA firm and a leading mid-market auditor offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, FedRAMP, and CMMC services nationwide.
Samil PricewaterhouseCoopers
Seoul, South Korea
Samil PwC is PricewaterhouseCoopers' South Korean member firm offering SOC 1, SOC 2, ISO 27001, ISMS-P, and compliance audit services for Korean enterprises.
Schellman & Company
Tampa, Florida
Schellman is a leading US compliance audit firm specializing in SOC 2, ISO 27001, FedRAMP, HITRUST, and PCI DSS assessments for technology companies.
Sirar by STC
Riyadh, Saudi Arabia
Sirar by STC is Saudi Arabia's leading cybersecurity firm offering ISO 27001, NCA-ECC, and PDPL assessments.
SISA Information Security
Bangalore, India
SISA is India's largest PCI QSA company offering PCI DSS, ISO 27001, and SOC 2 assessments globally.
SK shieldus
Seoul, South Korea
SK shieldus is South Korea's largest cybersecurity firm offering ISO 27001, ISMS-P, and SOC 2 assessments.
Sogeti Cybersecurity
Paris, France
Sogeti Cybersecurity is a Capgemini subsidiary offering enterprise-grade compliance services across Europe.
ST Engineering Cybersecurity
Singapore
ST Engineering Cybersecurity is a leading Singapore firm offering ISO 27001, SOC 2, and MTCS assessments.
Stroz Friedberg (Aon)
New York, NY
Stroz Friedberg (Aon Cyber Solutions) offers SOC 2, ISO 27001, and cyber risk compliance services.
TCS (Tata Consultancy Services)
Mumbai, India
TCS is India's largest IT services company offering cybersecurity, compliance audit, and risk advisory services to enterprises across 46 countries worldwide.
TCS Cybersecurity
Mumbai, India
TCS Cybersecurity provides enterprise-grade compliance services across SOC, ISO 27001, PCI DSS, and more.
Tech Mahindra Cybersecurity
Pune, India
Tech Mahindra Cybersecurity offers ISO 27001, SOC 2, and PCI DSS compliance for enterprises globally.
Telstra Purple (Cybersecurity)
Melbourne, Australia
Telstra Purple is a leading Australian cybersecurity firm offering IRAP, ISO 27001, and SOC 2 assessments.
Truesec
Stockholm, Sweden
Truesec is a leading Swedish cybersecurity firm offering ISO 27001, SOC 2, and NIS2 compliance assessments.
Trustwave
Chicago, IL
Trustwave is a global cybersecurity firm specializing in PCI DSS, SOC 2, and ISO 27001 assessments.
Wavestone
Paris, France
Wavestone is a French management and technology consultancy offering ISO 27001, NIS2, and GDPR compliance.
Wipro Cybersecurity
Bangalore, India
Wipro Cybersecurity offers enterprise-grade compliance services across ISO 27001, SOC, and PCI DSS.
WithSecure
Helsinki, Finland
WithSecure (formerly F-Secure Business) is a Finnish cybersecurity firm offering ISO 27001 and NIS2 compliance.
10FA Compliance
New York, NY
10FA Compliance is a New York-based compliance consultancy focused on SOC 2 and ISO 27001 readiness for technology and SaaS companies.
24By7Security
Coral Springs, FL
24By7Security is a Coral Springs, FL cybersecurity consultancy and PCI QSA specializing in HIPAA, PCI DSS, SOC 2, and CMMC compliance.
360 Advanced
Nashville, TN
360 Advanced is a US-based compliance audit firm offering SOC 2, PCI DSS, HITRUST, ISO 27001, and HIPAA audits with a focus on technology and healthcare companies.
AAFCPAs
Westborough, MA
AAFCPAs is a Massachusetts CPA firm founded in 1973 providing SOC 1, SOC 2, HIPAA, and IT audit services to service organizations.
AARC-360
Atlanta, GA
AARC-360 is a PCAOB-registered Atlanta CPA firm delivering SOC 1, SOC 2, ISO 27001, HIPAA, and PCI DSS assurance and compliance services.
Abacode
Tampa, FL
Abacode is a Tampa-based managed cybersecurity and compliance provider aligning clients to CMMC, SOC 2, ISO 27001, and HIPAA frameworks.
Abacus Group
New York, NY
Abacus Group is a New York-based IT and cybersecurity provider delivering compliance and risk services to hedge funds and private equity firms.
ACA Group
New York, NY
ACA Group is a global GRC advisory firm whose ACA Aponix division provides cybersecurity assessments and compliance support for financial services.
ACI Federal
Alexandria, VA
ACI Federal is a FedRAMP 3PAO and CMMC C3PAO serving federal agencies and government contractors.
ACIS Professional Center
Bangkok, Thailand
ACIS Professional Center is Thailand's leading cybersecurity firm offering ISO 27001 and PCI DSS assessments.
Acuity Risk Management
London, United Kingdom
Acuity Risk Management offers ISO 27001, SOC 2, and NIS2 compliance assessments with integrated risk management.
Adams Brown
Wichita, KS
Adams Brown is a Wichita, KS CPA and advisory firm founded in 1945, offering SOC 1 and SOC 2 examinations plus audit, tax, and IT services.
Advantio
Dublin
Advantio, an Integrity360 company based in Dublin, is a leading European PCI QSA providing PCI DSS, ISO 27001, and SOC 2 assessment services.
Advens
Lille, France
Advens is a French cybersecurity firm offering ISO 27001, HDS, and NIS2 compliance assessments.
Agio
New York, NY
Agio is a New York-based managed IT and cybersecurity firm providing SOC, ISO 27001, and SEC compliance support to financial services firms.
AhnLab Cybersecurity
Seongnam, South Korea
AhnLab is South Korea's leading cybersecurity company offering ISO 27001 and ISMS-P assessments.
Al Ghaith & Co
Abu Dhabi, UAE
Al Ghaith & Co is a leading UAE audit and advisory firm offering SOC, ISO 27001, and compliance services for government entities and private sector organizations.
Alder & Co
Salt Lake City, UT
Alder & Co is a Salt Lake City-based CPA firm providing SOC 1 and SOC 2 examinations for service organizations and technology companies.
Align
New York, NY
Align is a New York-based technology infrastructure and managed services firm offering cybersecurity advisory and compliance services since 1986.