IT Risk & Compliance Specialist

Job Summary

A company is looking for an IT Risk & Compliance Specialist in Information Security.

Key Responsibilities

• Facilitate external SOC2 audits and coordinate with auditors and internal teams
• Monitor compliance against internal standards and act as the first line of defense for audits
• Conduct readiness assessments and provide recommendations for control improvements

Required Qualifications

• 3 to 5 years of experience in IT Audit, Governance, Risk & Compliance, or Internal Audit
• At least one year of experience with SOC2 compliance readiness assessments
• Possession of a relevant certification (CISA, CISM, CISSP, CRISC, CRMA) or certification eligibility
• Experience in developing and implementing controls through frameworks like NIST, COSO, or COBIT
• Ability to manage multiple roles and responsibilities within the team