Senior Information Security Internal Auditor

📋 Description

• Own and evolve the internal audit program aligned to FedRAMP Moderate.
• Maintain Information Security & Privacy Framework; update policies.
• Conduct NIST 800-53 assessments; provide FedRAMP-based recommendations.
• Lead monthly FedRAMP Continuous Monitoring (ConMon) activities.
• Partner with engineering and operations to meet milestones.
• Liaise with external auditors; articulate control implementation in cloud.

🎯 Requirements

• Experience with FedRAMP, NIST 800-53, FISMA, or similar frameworks.
• 3+ years in security, compliance, or audit in a technical environment.
• Hands-on with major frameworks: FedRAMP, SOC 2, ISO 27001, BSI C5.
• Strong understanding of FedRAMP reporting and information collection processes.
• Solid knowledge of information security policies and best practices.
• Strong communication skills with the ability to influence stakeholders.

🎁 Benefits

• Health, dental, mental health benefits.
• Disability income benefits and life/AD&D insurance.
• 401(k) plan with company match.
• Paid time off.
• Fitness reimbursements.
• Fully remote, home-based role in the US.