Internal Auditor

This is a fully remote position, open to applicants in India, +1 more country.

📋 Description

• Evaluate, review, and validate documentation and control evidence within clients' GRC platforms, including Vanta, to ensure compliance with ISO 27001, ISO 42001, HIPAA, and GDPR standards.

• Organize internal audits and prepare for readiness assessments.

• Detect control deficiencies and suggest effective remediation strategies.

• Provide timely and clear updates to internal teams about audit schedules, deliverables, and compliance results.

• Offer independent and objective assurance services to assess the design and effectiveness of security, compliance, and governance controls.

• Work in collaboration with customers, Customer Success Managers, GRC Consultants, engineering teams, and corporate leadership.

• Manage multiple fast-paced compliance initiatives while balancing various testing parameters and audit deadlines.

⛳️ Requirements

• 2–5 years of hands-on experience in internal auditing, information security compliance, or Governance, Risk, and Compliance (GRC) roles.

• Strong knowledge of information security and compliance frameworks.

• Expertise in ISO 27001, ISO 42001, HIPAA, and GDPR.

• Experience using Vanta or similar GRC platforms for automated evidence collection, continuous control monitoring, and real-time audit preparedness.

• Ability to coordinate and implement multiple compliance initiatives at the same time while adhering to strict audit deadlines.

• Excellent written and verbal communication skills in English.

• Capability to analyze control documentation, spot compliance issues, and create remediation plans.

• Possession of or active pursuit of technical certifications such as CPA, CIA, CISA, or ISO Lead Auditor.

• Proven track record in navigating B2B SaaS, cloud software architectures, subscription environments, and digital compliance automation frameworks.

• Familiarity with information security protocols, network vulnerability testing parameters, and technical access control schemes.

• Experience in auditing system logs, validating technical evidence, and documenting procedures.

• Reliable high-speed internet connection and a professional home office setup.

• Availability to work from 8:00 AM to 5:00 PM U.S. Eastern Time (ET).

• Willingness and capability to travel locally for occasional onsite meetings, team gatherings, or business functions.

• Participation in live video interviews with the camera on and identity verification during the recruitment and onboarding process.

• Employment is contingent upon successful identity verification and background checks, as allowed by law.

🏝️ Benefits

• Defined career path with mentorship and training opportunities.

• Reimbursement for the successful completion of approved training and certification programs relevant to your current role.

• Competitive base salary with regular performance evaluations linked to merit-based assessments and bonus potential.

• Ample opportunities for career progression.

• Flexibility to work from any location while collaborating with a global team.