Information Security Auditor

📋 Description

• Audit SOC 2 and PCI DSS; develop and monitor controls.
• Lead cloud and systems audits for frameworks and regs.
• Assess security controls for effectiveness and compliance.
• Guide stakeholders on securing systems and compensating controls.
• Research security best practices and drive remediation.
• Identify weaknesses and improve internal controls.

🎯 Requirements

• Bachelor's degree with 4-6 years of related experience.
• 3+ years in external/internal audit roles (SOC 2, PCI DSS).
• Knowledge of ISO/IEC 27001, PCI DSS, NIST CSF, NIST 800-53.
• Experience implementing/assessing IT security controls.
• Certifications such as CISA, CISSP, CRISC, CCSP, CISM, GIAC, QSA.
• Strong PM, communication, and cross-functional collaboration.