Senior Information Systems Auditor

This is a fully remote position, open to applicants in Turkey.

📋 Description

• Lead and manage global compliance initiatives (ISO/IEC 27001, 22301, 27701, 20000-1, SOC 2, NIST CSF, CSA STAR) to ensure ongoing audit preparedness.

• Strategically plan and carry out risk-based IT and internal audits, emphasizing secure SDLC, software engineering methodologies, cloud infrastructure, and AI security sectors.

• Assess and improve the efficacy of security and governance controls, fostering continuous enhancement across policies and procedures.

• Contribute to Requests for Proposals (RFPs) and security questionnaires, providing accurate and strategic insights regarding security and compliance.

• Oversee the entire process of audit and security vulnerability findings, guaranteeing sustainable remediation and measurable enhancements in controls.

• Actively engage in the Third-Party Risk Management (TPRM) program by participating in SaaS security evaluations and vendor due diligence processes.

• Define and monitor essential audit and compliance metrics, delivering insights to leadership and pertinent stakeholders.

• Evaluate the risks and privacy implications of emerging technologies (AI, ML, and automation), advising engineering teams on secure adoption methods.

⛳️ Requirements

• A minimum of 3 years of practical experience in audit, compliance, risk management, or information security, ideally in a SaaS, cloud-native, or technology-focused environment.

• Hands-on familiarity with ISO/IEC standards (27001, 27701, 22301, 20000-1) and SOC 2, encompassing preparation, audit coordination, and evidence oversight.

• Experience in advising cross-functional teams and influencing control enhancements in fast-paced technology settings.

• Solid understanding of international security and privacy regulations (e.g., GDPR, CCPA) and associated compliance practices.

• Experience in supporting or managing Third-Party Risk Management (TPRM), vendor due diligence, and compliance processes involving customers.

• Demonstrated ability to manage multiple audits and compliance projects concurrently in a dynamic environment.

• Excellent verbal and written communication skills in English, including proficiency in documentation and policy development.

🏝️ Benefits

• Unlimited opportunity

• Global exposure

• Equal opportunity employer

• Candidates required to complete reference and identity checks