Security Compliance Auditor

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Lead internal audits, gap assessments, and readiness evaluations in accordance with industry standards and regulatory frameworks, including SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, HITRUST CSF, FedRAMP, and NIST frameworks.

• Evaluate clients' existing compliance status by analyzing policies, procedures, control designs, implementations, and supporting documentation.

• Conduct client interviews, process walkthroughs, control testing, and evidence review sessions.

• Align controls across various frameworks to minimize redundant efforts and present a cohesive view of compliance.

• Utilize risk management frameworks to identify, assess, and prioritize compliance and security risks.

• Assist clients in developing or enhancing risk registers, risk treatment strategies, and risk acceptance procedures.

• Communicate risk assessments to both technical teams and executive leadership.

• Support clients in establishing strategic compliance objectives, target scopes, timelines, and certification or attestation milestones.

• Create prioritized remediation roadmaps that connect gaps to associated risks, responsible parties, required efforts, and target deadlines.

• Guide clients in the development of policies and procedures, implementation of controls, and collection of evidence.

• Validate remediation efforts and ensure controls are functioning as intended prior to external audits.

• Prepare clients for external audits and certifications by defining scopes, assembling evidence packages, and conducting mock or pre-assessment walkthroughs.

• Assist clients during external audits by managing evidence requests and addressing auditor inquiries.

• Aid clients in interpreting and responding to findings from external audits and regulatory mandates.

• Compile audit documentation, gap assessments, findings, risk evaluations, and recommendations.

• Oversee multiple simultaneous engagements, delivering high-quality results punctually and within defined scopes.

• Advise clients on enhancing internal controls, governance, risk management, and compliance initiatives.

⛳️ Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Accounting, or a related discipline.

• 3–5 years of experience in IT auditing, internal auditing, security compliance, or cybersecurity consulting.

• Practical experience conducting internal audits, gap assessments, or readiness evaluations against at least two of the following: SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, HITRUST CSF, FedRAMP, or NIST frameworks.

• Familiarity with regulatory and external auditing processes, as well as awareness of what auditors and assessors expect in terms of evidence and documentation.

• Strong comprehension of risk management frameworks and methodologies, including NIST RMF, NIST SP 800-30, ISO/IEC 27005, or ISO 31000.

• Experience in translating findings into remediation strategies and compliance roadmaps for clients.

• Exceptional written and verbal communication skills, with the ability to engage effectively with clients ranging from technical personnel to executives.

• Strong analytical and organizational abilities, with the capacity to manage competing priorities independently.

🏝️ Benefits

• Full-time contractor position.

• Remote work opportunity from the Philippines.

• Compensation that is competitive within the market, based on experience, qualifications, and expertise.