FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in managing SOC, ISO, and HIPAA audit programs while ensuring compliance with frameworks such as FedRAMP and NIST. Proficient in automating evidence collection and control monitoring using modern GRC platforms.
Highest-signal resume keywords
GRC ExperienceSOC 2 Type II Audit ExperienceISO 27001 Audit ExperienceCISSP CertificationExperience with Vanta
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Information Security Risk ManagementCompliance AuditingInternal AuditEvidence GatheringControl MonitoringRisk AssessmentDue DiligencePolicy DevelopmentKPI ReportingM&A Due Diligence
Soft Skills
Clear CommunicationInfluencing StakeholdersCollaboration
Tools & Technologies
VantaDrataOneTrustArcherServiceNow
Certifications & Qualifications
CISSPCRISCCISMCISA
Industry Keywords
SOCISOHIPAAFedRAMPNIST 800-53CybersecurityRegulated IndustriesAI GovernanceContinuous MonitoringIncident Response
Tech Stack
Tools & technologiesCyber SecurityServiceNow
About the role
Key responsibilities & impact- Own SOC, ISO, and HIPAA audit programs
- Manage customer and partner security questionnaires and due diligence requests
- Maintain information security policies, standards, and procedures
- Coordinate audit scoping, timing, preparation, evidence gathering, fieldwork, and reporting
- Support FedRAMP and other compliance frameworks through research, evidence gathering, deliverable review, and documentation
- Perform internal audit, assurance testing, and due diligence work, including M&A
- Build and maintain a reusable questionnaire answer library using AI-assisted, automated, and manual processes
- Drive remediation timelines for audit findings with Engineering and escalate high-risk blockers
- Align policies with NIST SP 800-53/CSF, ISO 27001:2022, HIPAA, and SOC 2
- Coordinate policy review, approval, publication, and acknowledgment with policy owners, People Operations, and Legal
- Back up vendor risk assessments, risk exception reviews, and Trust Center operations
- Help define and report KPIs and KRIs and support the cyber risk register
- Administer Vanta and automate evidence collection, control monitoring, and framework cross-mapping
- Support the security awareness training program
Requirements
What you’ll need- 5+ years of experience in GRC, information security risk, compliance, or IT audit, including experience at a SaaS company
- A degree in Cybersecurity, or one of these certifications: CISSP, CRISC, CISM, or CISA
- SOC 2 Type II and ISO 27001 audit and attestation experience
- Clear written and verbal communication, with the ability to explain technical control details to engineers, business owners, and customers
- Track record of getting results through influence with engineers and other stakeholders who don't report to you
- Hands-on experience in at least four specified GRC areas preferred
- Experience with FedRAMP, NIST 800-53, or other government compliance frameworks preferred
- Hands-on configuration of a modern GRC platform such as Vanta, Drata, OneTrust, Archer, or ServiceNow preferred
- Experience automating control monitoring and evidence collection preferred
- Experience answering customer security questionnaires at scale with AI-assisted tools preferred
- GRC experience at a cybersecurity, identity, or infrastructure software company serving regulated industries preferred
- Familiarity with AI governance frameworks such as ISO 42001 or NIST AI RMF preferred
- Experience with M&A due diligence, IPO readiness, audit test plan development, quantitative cyber risk analysis, business continuity, incident response, or continuous monitoring plans preferred
- U.S. citizenship
Benefits
Comp & perks- Hybrid work model: up to three days per week in the office and the remaining days remotely
- AI and GRC tooling, including Vanta
- Global team environment
- Healthy work-life balance
- Growth opportunities
- Employee experience rooted in purpose, growth, and balance