Senior Risk & Audit Specialist

1 month, 1 week ago
Full-time
Senior
Finance and Accounting
RemoteWoman

RemoteWoman

RemoteWoman is a platform that connects women with remote job opportunities at female-friendly companies in various fields such as marketing, development, design, product, sales, and support. They also offer a service for obtaining a legal US marriage ...

Internet Software & Services
1-10

Description

  • Support active and upcoming audits and certifications, including ISO 27001, SOC 2, PCI DSS, HIPAA, and other assurance work.
  • Coordinate evidence collection, review evidence quality, schedule walkthroughs, and follow up with control owners.
  • Support risk assessments, risk register updates, control monitoring, issue tracking, and remediation follow-up.
  • Work with teams to identify control gaps, agree on practical actions, and track remediation to completion.
  • Conduct third-party risk management reviews to support a comprehensive view of organizational risk.
  • Support ongoing compliance activities across established frameworks and emerging readiness work, including Australia ISM/IRAP/HCF, NIS2, and ISO 42001/AIM.
  • Maintain policies, procedures, control narratives, and supporting documentation.
  • Respond to customer and prospect security or compliance questions in partnership with Sales, Legal, Security, and Product.
  • Support updates to the Trust Center and other trust documentation.
  • Prepare clear updates on audit status, risks, blockers, metrics, and remediation progress for leadership.

Requirements

  • 5+ years of experience in risk, audit, compliance, governance, security assurance, or a closely related area.
  • Hands-on experience supporting audits, evidence collection, control testing or monitoring, and remediation tracking.
  • Working knowledge of security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, HIPAA, ISO 42001, GDPR, PIPEDA, or similar standards.
  • Ability to explain requirements clearly to both technical and non-technical audiences.
  • Strong organization and prioritization skills, especially when managing several deadlines at once.
  • Good judgment, attention to detail, and a practical approach to solving problems.
  • Comfort working in a remote, global environment with cross-functional teams across varied time zones.
  • Experience with governance, risk, and compliance tools or audit management platforms is preferred.
  • Experience supporting customer assurance, security questionnaires, or trust documentation is preferred.
  • Relevant certifications such as CISA, CRISC, CISSP, CC, CISM, CGEIT, ISO 27001, ISO 42001, or similar are preferred.

Benefits

  • Flexible PTO.
  • Comprehensive healthcare coverage in the UK, Canada, France, Spain, and the USA.
  • Company stock options.
  • Professional development budget.
  • Office equipment budget.
  • Wellness budget.
  • Annual team gatherings.
  • Internet reimbursement.
  • Inclusive parental leave.
  • Remote work travel program.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Compliance Analyst

Sezzle 251-1K Diversified Financial Services

Sezzle is hiring a Compliance Analyst to provide oversight and advisory support for consumer finance, payments, and financial crimes compliance across operational reviews, governance, and regulatory activities.

18 hours, 30 minutes ago

Investigative Research Specialist (Remote) | LATAM

HireHawk is hiring a remote investigative research contractor for a U.S.-based employment law firm to identify and verify potential plaintiffs and build lead research systems for labor and employment cases.

CRM Digital Marketing
19 hours ago

Senior Privacy & Compliance Program Manager

Mozilla 251-1K Internet Software & Services

Thunderbird’s parent company MZLA is hiring a Senior Privacy & Compliance Program Manager to coordinate privacy, compliance, and data governance work across its growing global products and operations.

1 day, 18 hours ago

Compliance Engineer Intern

CertiK is hiring a regulatory research and compliance support role to help its Engineering team with licensing analysis, AI output review, and client deliverable preparation for Web3 security and digital asset work.

LLM
2 days, 18 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers