As far as I know, SOAP services have security standards recognized by OASIS and W3C, such as:
Are there any security standards for RESTful services?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
OWASP has some very good guidelines concerning the security of REST services.
In addition to the mentioned documents, these standards may be of your interest: