RemoteLeaf Logo
Log in Sign up

Senior Information Security Internal Auditor

5 hours, 47 minutes ago
United States
Full-time
Senior
Security Analyst
Cybersecurity
CI/CD DevSecOps Terraform
Apply Now
Everbridge

Everbridge

Everbridge provides a comprehensive software platform that automates and enhances organizations' responses to critical events, ensuring the safety of individuals and the continuity of business operations during emergencies such as natural disasters, cy...

Internet Software & Services
1K-5K
Founded 2002
View All Jobs 17

Description

  • Develop and maintain the information security internal audit program aligned with FedRAMP, CMMC, and applicable requirements.
  • Maintain the Information Security and Privacy Framework, including policies, procedures, standards, and guidelines.
  • Translate framework requirements into testable technical controls and acceptance criteria.
  • Partner with Engineering, DevOps, and Security to integrate controls into workflows.
  • Own monthly continuous monitoring assessments and submissions.
  • Coordinate CMMC and FedRAMP documentation, milestones, and certification activities.
  • Serve as the technical point of contact during audits by explaining architecture, data flows, and control evidence.
  • Build automated evidence collection across cloud platforms, identity providers, CI/CD pipelines, and ticketing systems.
  • Develop policy-as-code and continuous control monitoring checks using tools such as OPA, Cloud Custodian, or AWS Config.
  • Manage the GRC platform, audit plans, reports, documentation, evidence, and recertification processes.

Requirements

  • At least 3 years of experience in security, assessments, compliance consulting, or advisory work in a highly technical environment.
  • At least 3 years of experience supporting technical assessments for CMMC, FedRAMP, SOC 2, BSI C5, ISO 27001, or similar programs.
  • Experience with CMMC, DFARS, NIST SP 800-171, FedRAMP, NIST SP 800-53, FISMA, or similar compliance frameworks.
  • Experience in cloud security, platform engineering, or DevSecOps.
  • Experience with Infrastructure as Code, such as Terraform, and integrating security tools into CI/CD pipelines.
  • Strong information collection, reporting, documentation, metrics, and measurement skills.
  • Ability to explain technical risk to nontechnical stakeholders and translate audit requirements for engineers.
  • Strong communication, organization, interpersonal, initiative, and decision-influencing skills.
  • CISSP, CIA, CISA, CySA+, CCSP, or ISO 27001 Auditor certification preferred.
  • U.S. citizenship and ability to obtain a Secret clearance required.

Benefits

  • Estimated salary of $118,000–$158,200, with potential variable compensation.
  • Fully remote, home-based role available anywhere in the United States.
  • Healthcare, dental, parental planning, and mental health benefits.
  • Disability income benefits and life and AD&D insurance.
  • 401(k) plan with company match.
  • Paid time off and fitness reimbursements.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Coalition

Senior Security Analyst - Germany

Coalition 251-1K Insurance

Coalition is seeking a Senior Security Analyst in Germany to assess cyber risk, investigate incidents and claims, and turn technical findings into customer guidance and improvements to insurance products and internal security processes.

Germany Full-time Senior Security Analyst
Cybersecurity HIPAA Network Security Penetration Testing TCP/IP
6 hours, 17 minutes ago
N-iX

Cyber Security Administrator

N-iX 1K-5K Internet Software & Services

N-iX is seeking a Junior Cybersecurity Administrator to support its global software development organization by maintaining and improving information security processes.

Ukraine Full-time Junior Security Analyst
Cybersecurity DNS Linux macOS SIEM TCP/IP
6 hours, 17 minutes ago
DoorDash

Senior Security Risk Analyst, GRC

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a Security Risk Specialist on its Global Governance, Risk and Compliance team to manage security risk assessments, treatment plans, reporting, exceptions, and proactive control improvement across DoorDash, Wolt, and Deliveroo.

United States Full-time Mid Level Security Analyst
$133k-$195k
3 days, 6 hours ago
Chainguard

Security Analyst (Governance and Trust)

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a remote Security Analyst (Governance and Trust) to maintain customer-facing security assurance content and govern AI-enabled workflows that support the Governance and Trust function.

United States Canada United Kingdom Germany Full-time Mid Level Security Analyst
Git
4 days, 5 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers