Senior Technology Risk & Audit Specialist

6 hours, 15 minutes ago
Full-time
Senior
Cybersecurity
Picus Security

Picus Security

Picus Security offers a comprehensive security validation platform that continuously tests and optimizes security controls through automated attack simulations, enabling organizations to proactively identify vulnerabilities and enhance their overall cy...

Professional Services
51-250
Founded 2013
$32M raised

Description

  • Plan and execute risk-based IT and internal audits covering secure SDLC, software engineering, cloud infrastructure, and AI security.
  • Evaluate and improve security, governance, and technology controls, policies, and processes.
  • Manage audit findings and security vulnerabilities through remediation and measurable control improvements.
  • Lead global compliance programs and maintain continuous audit readiness across ISO, SOC 2, NIST, and CSA STAR frameworks.
  • Support third-party risk management through SaaS security assessments and vendor due diligence.
  • Define and monitor audit and compliance metrics, reporting insights to leadership and stakeholders.
  • Assess the security and privacy impacts of AI, machine learning, and automation technologies.
  • Advise engineering, business, and technology teams on scalable, risk-aware processes and secure technology adoption.

Requirements

  • 6+ years of hands-on experience in IT audit, information security, risk, or compliance management, preferably in a SaaS, cloud-native, or high-growth technology environment.
  • Experience auditing product security and secure SDLC processes, including CI/CD controls, vulnerability management, software supply chain security, and SBOM governance.
  • Technical understanding of cloud infrastructure, IAM, SIEM, and CI/CD pipelines.
  • Hands-on expertise with ISO/IEC 27001 and 27701, SOC 2 Type 2, and NIST frameworks, including audit preparation, coordination, and evidence management.
  • Knowledge of international privacy regulations such as GDPR, KVKK, and CCPA, plus third-party risk management practices.
  • Ability to translate international standards into practical, scalable processes.
  • Strong written and spoken English with the ability to influence cross-functional stakeholders.
  • Preferred certifications include ISO/IEC 27001, 22301, 27701, 20000-1, or 42001 Lead Auditor; CISA, CISM, CRISC, AAIA, AAISM, or AAIR.
  • Experience with SOC 2, NIST, and CSA STAR reporting frameworks is preferred.
  • Collaborative team-oriented approach.

Benefits

  • Global remote work environment.
  • Professional growth and expanding career opportunities in a fast-growing cybersecurity company.
  • Exposure to international customers and global teams.
  • Opportunity to shape an emerging cybersecurity market and work on AI-driven security validation.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Regulatory and Compliance Team Lead

World Business Lenders 251-1K Real Estate

World Business Lenders is seeking a Regulatory and Compliance Team Lead to oversee its compliance framework across lending, servicing, and corporate operations within a fully remote, multinational organization.

7 hours, 15 minutes ago

Regional Market Compliance Manager

Green Thumb Industries 1K-5K Pharmaceuticals

The Regional Market Compliance Manager leads regulatory adherence, risk management, and compliance operations across multiple markets within an assigned region, partnering with leadership and regulatory stakeholders to support compliant business growth.

1 day, 5 hours ago

Regulatory and Start Up Specialist - Fluent in Hungarian

Precision For Medicine 1K-5K Pharmaceuticals

Precision for Medicine is seeking a Regulatory and Start Up Specialist to coordinate regulatory submissions and site activation activities for Hungarian clinical trial sites, ensuring timely approvals and readiness.

1 day, 6 hours ago

Regulatory and Start Up Specialist - Fluent in Hungarian

Precision For Medicine 1K-5K Pharmaceuticals

Precision for Medicine is seeking a Regulatory and Start Up Specialist to coordinate regulatory submissions and site activation activities for clinical trials supporting Hungarian sites.

1 day, 6 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers