SOC2 & CMMC Internal Auditor Liaison

This is a fully remote position, open to applicants in United States.

📋 Description

• Collaborate with engineers, support team members, and external auditors on SOC2, CMMC, and FedRAMP audit initiatives.

• Conduct senior-level auditing and advisory tasks to create audit programs and methodologies.

• Execute research, benchmarking, and assessments of records and financial documents.

• Carry out data and risk analyses, pinpoint controls, evaluate business operations, and assess management systems.

• Oversee the development of audit scope, selection of external auditors, and completion of annual audits.

• Gather operational documentation and data samples to address process deficiencies or document accepted risks.

• Foster relationships with external auditors while anticipating shifts in audit priorities.

• Provide education to the organization regarding audit standards, risk assessments, and controls.

• Embed audit best practices within the operational framework.

• Identify and document corrective measures based on findings from audit reports.

• Address client inquiries regarding process documentation and audit findings.

• Monitor changes to CUECs from partners and vendors.

⛳️ Requirements

• Proven experience in auditing aligned with generally accepted auditing standards and risk-based internal auditing.

• Familiarity with fundamental information technology controls within a cloud-based environment.

• Proficiency in analyzing, interpreting, and summarizing data, policies, and procedures for audit purposes.

• Experience in building and sustaining trust-based relationships with both internal and external stakeholders.

• Exceptional writing and communication abilities.

• Openness to applying skills across a compact organization, from process documentation to comprehensive audit strategies.

• Commitment to supporting the organization’s culture and values.

• Previous experience with DOD cybersecurity requirements and contracts, such as NIST 800-171, is advantageous.

• Familiarity with FedRAMP requirements is beneficial.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Opportunities for professional development and training.

• Comprehensive health and wellness plans.

• Flexible work arrangements.

• Supportive and collaborative work environment.