Internal Security Compliance Auditor

Job Summary

To support a growing cybersecurity platform, the full-time Internal Security Compliance Auditor will conduct thorough internal reviews of client evidence, perform quality assurance checks on compliance documentation, and ensure clients are well-prepared for external audits while working remotely.

Key Responsibilities

• Perform thorough internal reviews of client-uploaded evidence for compliance frameworks including SOC2, ISO27001, PCI, HIPAA, and GDPR
• Conduct detailed quality assurance checks on individual controls to verify completeness, accuracy, and sufficiency prior to their audits with third-party auditing firms
• Identify gaps or weaknesses in evidence documentation and recommend improvements

Required Qualifications

• Deep understanding of SOC2, ISO27001, PCI, HIPAA, and GDPR requirements
• Strong technical knowledge of security controls and their implementation
• Experience reviewing and evaluating evidence for compliance audits, particularly in preparing organizations for external audit processes
• Familiarity with compliance automation platforms and tools
• Certification in relevant frameworks (e.g., CISA, ISO 27001 Lead Auditor) preferred