Security Compliance Auditor

Arancia

. Lead internal audits, gap assessments, and readiness assessments against industry standards and regulatory frameworks, including SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, HITRUST CSF, FedRAMP, and NIST frameworks .

Posted 11/6/2026full-timeRemote • PhilippinesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading internal audits and compliance assessments against industry standards such as SOC 2, ISO/IEC 27001, and HIPAA, while effectively communicating risk and remediation strategies to clients and stakeholders. Proficient in developing compliance roadmaps and managing multiple engagements to ensure timely delivery of high-quality work.

Highest-signal resume keywords

Internal Audit ExperienceSOC 2 ComplianceRisk Management FrameworksRegulatory Compliance KnowledgeExcellent Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Internal AuditsGap AssessmentsCompliance AssessmentsRisk ManagementControl TestingRemediation PlanningEvidence CollectionAudit DocumentationPolicy DevelopmentControl Implementation

Soft Skills

Analytical SkillsOrganizational SkillsClient EngagementIndependent ManagementVerbal Communication

Industry Keywords

SOC 2ISO/IEC 27001PCI DSSHIPAAHITRUST CSFFedRAMPNIST FrameworksNIST RMFNIST SP 800-30ISO 31000

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead internal audits, gap assessments, and readiness assessments against industry standards and regulatory frameworks, including SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, HITRUST CSF, FedRAMP, and NIST frameworks
Assess clients' current compliance posture by reviewing policies, procedures, control design, implementation, and supporting evidence
Lead client interviews, process walkthroughs, control testing, and evidence-review sessions
Map controls across multiple frameworks to reduce duplicate effort and provide a unified view of compliance
Apply risk management frameworks to identify, rate, and prioritize compliance and security risks
Help clients build or mature risk registers, risk treatment plans, and risk acceptance processes
Communicate risk to technical teams and executive leadership
Help clients define strategic compliance goals, target scope, timelines, and certification or attestation milestones
Develop prioritized remediation roadmaps linking gaps to risks, owners, effort, and target dates
Guide clients through policy and procedure development, control implementation, and evidence collection
Validate remediation and confirm controls are operating as intended before external audits
Prepare clients for external audits and certifications through scoping, evidence packages, and mock or pre-assessment walkthroughs
Support clients during external audits by coordinating evidence requests and responding to auditor questions
Help clients interpret and respond to external audit findings and regulatory requirements
Prepare audit documentation, gap reports, findings, risk ratings, and recommendations
Manage multiple concurrent engagements, delivering high-quality work on time and within scope
Advise clients on strengthening internal controls, governance, risk management, and compliance programs

Requirements

What you’ll need

Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Accounting, or a related field
3–5 years of experience in IT audit, internal audit, security compliance, or cybersecurity consulting
Hands-on experience conducting internal audits, gap assessments, or readiness assessments against at least two of: SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, HITRUST CSF, FedRAMP, or NIST frameworks
Working knowledge of regulatory and external audit processes, and of what auditors and assessors expect in evidence and documentation
Strong understanding of risk management frameworks and methodologies, such as NIST RMF, NIST SP 800-30, ISO/IEC 27005, or ISO 31000
Experience translating findings into remediation plans and compliance roadmaps for clients
Excellent written and verbal communication skills, with the ability to engage confidently with clients from technical staff to executives
Strong analytical and organizational skills, with the ability to manage competing priorities independently

Benefits

Comp & perks

Full-time contractor employment
Remote work from the Philippines
Market-competitive compensation based on experience, qualifications, and expertise