Senior Information Security Auditor

Job Summary

To enhance compliance efforts, the full-time Senior Information Security Internal Auditor will develop and maintain the information security internal audit program, align it with regulatory requirements, and serve as a technical point of contact during audits in a fully remote capacity.

Key responsibilities

• Develop and maintain the information security internal audit program in alignment with FedRAMP, CMMC, and other applicable requirements
• Translate framework requirements into clear technical controls for engineering teams and oversee monthly continuous monitoring assessments
• Coordinate with Engineering and Operations to deliver compliance documentation on time and represent Compliance in certification projects

Required qualifications

• At least three years of experience in security, assessments, or compliance consulting in a technical environment
• Experience with major compliance frameworks such as CMMC, FedRAMP, or ISO 27001
• Background in cloud security, platform engineering, or DevSecOps
• Familiarity with Infrastructure as Code tools like Terraform and integrating security into CI/CD pipelines
• Possession of relevant certifications such as CISSP, CISA, or CCSP is a plus