Audit, Security GRC

📋 Description

• Run the audit program as a program: one integrated plan and calendar across audits and expansions
• Plan and run the quarterly audits, from scoping through report and findings closeout
• Run audit readiness ahead of each fieldwork window: control owner prep, evidence pre-checks and
• Scope each audit's boundary with Product and Engineering: which products and deployment paths are
• Help build the audit operating model and runbook for a unified audit program, and keep both current
• Drive automation in the program: evidence collected from source systems, request tracking and audit

🎯 Requirements

• Several years of program management: running multi-workstream programs with a plan, milestones
• Several years running external security audits (SOC 2 and ISO 27001 at minimum), on the company
• Working knowledge of SOC 2, the ISO 27000 family, ISO 42001 and HIPAA, and where their requirements
• Experience leading a gap assessment for a new framework or scope change and presenting the result
• Experience building or improving an audit process: calendars, request tracking, runbooks, roles and
• Enough technical fluency to understand how evidence is produced in cloud environments and to judge

🎁 Benefits

• We offer competitive compensation and benefits, optional equity donation matching, generous
• Visa sponsorship available (we do sponsor visas, but not for every role/candidate)
• Hybrid work policy: all staff expected in office at least 25% of the time
• Commitment to inclusion and encouragement to apply even if not meeting every qualification