Senior Risk & Audit Specialist

13 hours, 9 minutes ago
Full-time
Senior
Finance and Accounting
RemoteWoman

RemoteWoman

RemoteWoman is a platform that connects women with remote job opportunities at female-friendly companies in various fields such as marketing, development, design, product, sales, and support. They also offer a service for obtaining a legal US marriage ...

Internet Software & Services
1-10

Description

  • Support active and upcoming audits and certifications, including ISO 27001, SOC 2, PCI DSS, HIPAA, and other assurance work.
  • Coordinate evidence collection, review evidence quality, schedule walkthroughs, and follow up with control owners.
  • Support risk assessments, risk register updates, control monitoring, issue tracking, and remediation follow-up.
  • Work with teams to identify control gaps, agree on practical actions, and track remediation to completion.
  • Conduct third-party risk management reviews to support a comprehensive view of organizational risk.
  • Support ongoing compliance activities across established frameworks and emerging readiness work, including Australia ISM/IRAP/HCF, NIS2, and ISO 42001/AIM.
  • Maintain policies, procedures, control narratives, and supporting documentation.
  • Respond to customer and prospect security or compliance questions in partnership with Sales, Legal, Security, and Product.
  • Support updates to the Trust Center and other trust documentation.
  • Prepare clear updates on audit status, risks, blockers, metrics, and remediation progress for leadership.

Requirements

  • 5+ years of experience in risk, audit, compliance, governance, security assurance, or a closely related area.
  • Hands-on experience supporting audits, evidence collection, control testing or monitoring, and remediation tracking.
  • Working knowledge of security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, HIPAA, ISO 42001, GDPR, PIPEDA, or similar standards.
  • Ability to explain requirements clearly to both technical and non-technical audiences.
  • Strong organization and prioritization skills, especially when managing several deadlines at once.
  • Good judgment, attention to detail, and a practical approach to solving problems.
  • Comfort working in a remote, global environment with cross-functional teams across varied time zones.
  • Experience with governance, risk, and compliance tools or audit management platforms is preferred.
  • Experience supporting customer assurance, security questionnaires, or trust documentation is preferred.
  • Relevant certifications such as CISA, CRISC, CISSP, CC, CISM, CGEIT, ISO 27001, ISO 42001, or similar are preferred.

Benefits

  • Flexible PTO.
  • Comprehensive healthcare coverage in the UK, Canada, France, Spain, and the USA.
  • Company stock options.
  • Professional development budget.
  • Office equipment budget.
  • Wellness budget.
  • Annual team gatherings.
  • Internet reimbursement.
  • Inclusive parental leave.
  • Remote work travel program.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Privacy and Compliance Analyst (Remote)

BIS Safety Software Internet Software & Services

BIS Safety Software is hiring a remote Privacy and Compliance Analyst to support its risk, privacy, and compliance operations for a SaaS platform serving organizations that manage safety, learning, and compliance.

Cybersecurity
13 hours, 24 minutes ago

PCI Compliance Consultant

Avertium 251-1K IT Services

Avertium is seeking a Remote PCI Compliance Consultant to lead PCI audit engagements and advise clients in the Risk & Compliance practice on secure, compliant solutions.

Cybersecurity Network Security
13 hours, 24 minutes ago

Senior Compliance Consultant

Planet Technologies 251-1K Internet Software & Services

Planet Technologies is hiring a Senior Compliance Consultant to support remote security and compliance projects for public sector, defense industrial base, and commercial customers, with a focus on developing and delivering compliance solutions and strategies.

Azure HIPAA
13 hours, 24 minutes ago

GRC SECURITY ANALYST

ClearCapital.com, 1-10 Real Estate

Clear Capital is seeking a GRC Security Analyst to support security compliance, risk management, and audit readiness for its regulated mortgage lending and real estate valuation business.

13 hours, 24 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers