Arancia

Security Engineer

• Develop and implement comprehensive information security strategies aligned with organizational objectives
• Conduct security risk assessments and vulnerability analyses to identify potential threats and weaknesses
• Establish, implement, and enforce security policies, procedures, and standards
• Monitor, investigate, and respond to security incidents and potential data breaches
• Ensure compliance with NIST CSF, PCI DSS, HIPAA, and ISO 27001
• Provide security guidance, recommendations, and training to employees and relevant stakeholders
• Collaborate with IT teams and other departments to integrate security measures across organizational systems and operations
• Assess and update security protocols, controls, and systems to address emerging threats
• Monitor and report on security metrics, providing recommendations for continuous improvement
• Stay informed about emerging cybersecurity threats, industry trends, and evolving security technologies
• Own client engagements and provide technical guidance throughout security initiatives
• Mentor and support junior team members, sharing knowledge and promoting best practices

Explore Cybersecurity Consultant at Arancia. Review requirements and application details.

Cybersecurity Consultant

Auditor

• Lead internal audits, gap assessments, and readiness assessments against industry standards and regulatory frameworks, including SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, HITRUST CSF, FedRAMP, and NIST frameworks
• Assess clients' current compliance posture by reviewing policies, procedures, control design, implementation, and supporting evidence
• Lead client interviews, process walkthroughs, control testing, and evidence-review sessions
• Map controls across multiple frameworks to reduce duplicate effort and provide a unified view of compliance
• Apply risk management frameworks to identify, rate, and prioritize compliance and security risks
• Help clients build or mature risk registers, risk treatment plans, and risk acceptance processes
• Communicate risk to technical teams and executive leadership
• Help clients define strategic compliance goals, target scope, timelines, and certification or attestation milestones
• Develop prioritized remediation roadmaps linking gaps to risks, owners, effort, and target dates
• Guide clients through policy and procedure development, control implementation, and evidence collection
• Validate remediation and confirm controls are operating as intended before external audits
• Prepare clients for external audits and certifications through scoping, evidence packages, and mock or pre-assessment walkthroughs
• Support clients during external audits by coordinating evidence requests and responding to auditor questions
• Help clients interpret and respond to external audit findings and regulatory requirements
• Prepare audit documentation, gap reports, findings, risk ratings, and recommendations
• Manage multiple concurrent engagements, delivering high-quality work on time and within scope
• Advise clients on strengthening internal controls, governance, risk management, and compliance programs

Explore Security Compliance Auditor at Arancia. Review requirements and application details.

Open roles

Cybersecurity Consultant

Security Compliance Auditor