IT Auditor

📋 Description

• Own day-to-day compliance execution across PCI DSS, SOC 2 Type 2, and GovRAMP/FedRAMP, including
• Conduct internal IT audits and control assessments, documenting findings and producing formal
• Perform periodic gap analyses and readiness assessments to identify compliance weaknesses and
• Assess, maintain, and monitor controls aligned with the NIST 800-53 framework as applicable to
• Administer the organization's Governance, Risk, and Compliance (GRC) platform as the central system
• Provide guidance on client contract governance, evaluating security and compliance requirements to

🎯 Requirements

• 4–6 years of professional experience in IT audit, information security compliance, Governance
• Demonstrated experience working across multiple security and compliance frameworks, ideally
• Hands-on GovRAMP or FedRAMP experience is strongly preferred.
• Working knowledge of NIST 800-53 controls and their application within GovRAMP/FedRAMP
• Professional security certification such as CISA, CISSP, or CISM; CISA is preferred.
• Hands-on experience with a GRC platform such as Vanta, Drata, Secureframe, OneTrust, or an

🎁 Benefits

• Base salary of $107,000–$120,000 USD
• Fully remote work within the continental United States
• Health insurance (several plans fully covered)
• Vision insurance (fully covered)
• Dental insurance available
• Flexible, open PTO policy (after 30 days)