Senior Risk & Audit Specialist

This is a fully remote position, open to applicants in Canada.

📋 Description

• Assist with current and upcoming audits, including ISO 27001, SOC 2, PCI DSS, HIPAA, and other relevant assurance initiatives by coordinating the collection of evidence, assessing the quality of evidence, scheduling walkthroughs, and following up with control owners.

• Facilitate risk assessments, update the risk register, monitor controls, track issues, and follow up on risk treatment by collaborating with teams to identify control deficiencies, agree on actionable steps, and monitor remediation until completion.

• Execute third-party risk management evaluations to support a holistic view of organizational risk.

• Aid in ongoing compliance efforts across established frameworks and emerging readiness initiatives (including Australia ISM/IRAP/HCF, NIS2, and ISO 42001/AIM) while upholding policies, procedures, control narratives, and related documentation.

• Address security or compliance inquiries from customers and prospects in collaboration with Sales, Legal, Security, and Product teams, while assisting with updates to the Trust Center and other trust-related documentation.

• Generate clear updates regarding audit status, risks, obstacles, metrics, and remediation progress for leadership, and seek opportunities to streamline repeatable processes and minimize audit friction for control owners.

• Utilize risk, audit, and compliance tools to maintain organization, traceability, and ease of reporting.

• Provide support for internal audit and review activities as required.

⛳️ Requirements

• A minimum of 5 years of experience in risk, audit, compliance, governance, security assurance, or a closely related field.

• Practical experience in supporting audits, collecting evidence, testing or monitoring controls, and tracking remediation efforts.

• Familiarity with security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, HIPAA, ISO 42001, GDPR, PIPEDA, or similar standards.

• Ability to clearly communicate requirements to both technical and non-technical stakeholders.

• Strong organizational and prioritization abilities, particularly when managing multiple deadlines simultaneously.

• Good judgment, meticulous attention to detail, and a pragmatic approach to problem-solving.

• Comfort working in a remote, global environment with cross-functional teams across various time zones.

🏝️ Benefits

• Flexible PTO

• Comprehensive healthcare coverage (UK, Canada, France, Spain, USA)

• Company stock options

• Professional development budget

• Office equipment budget

• Wellness budget

• Annual team gatherings

• Internet reimbursement

• Inclusive parental leave

• Remote work travel program