Senior Information Security Internal Auditor

Role overview Lead information security audit and compliance work for cloud services, translating regulatory and framework obligations into practical controls. The role spans continuous monitoring, audit readiness, engineering partnerships, and automation of compliance evidence.

Responsibilities - Build and maintain an internal security audit program aligned with FedRAMP, CMMC, and other applicable requirements. - Maintain information security and privacy policies, procedures, standards, and guidance. - Turn framework requirements into testable technical controls and acceptance criteria, then work with engineering, DevOps, and security teams to integrate them into existing workflows. - Lead monthly continuous monitoring assessments and submissions, and coordinate timely delivery of certification documentation and project milestones. - Explain cloud architecture, data flows, and control evidence to auditors; represent compliance in certification planning and strategy discussions. - Automate evidence collection across cloud services, identity systems, CI/CD pipelines, and ticketing tools; improve policy-as-code checks and the GRC platform.

Requirements - Ability to interpret security and privacy framework requirements and express them as technical controls that engineering teams can implement and verify. - Experience coordinating audit evidence, continuous monitoring, and documentation across technical and operational teams. - Ability to explain cloud architecture, data flows, and control evidence to auditors and other stakeholders. - Familiarity with automated evidence collection, policy-as-code, continuous control monitoring, or GRC platform integrations is relevant to the role.

Benefits and work setup - Fully remote, home-based role open to candidates anywhere in the United States. - The stated estimated salary range is $118,000–$158,200, with possible variable compensation. - Benefits include health, dental, parental planning and mental health coverage, disability and life insurance, a 401(k) match, paid time off, and fitness reimbursements.