Validate Compliance Evidence: Review, assess, and verify documentation and control evidence within the GRC platform (Vanta) to confirm alignment with ISO 27001, ISO 42001, HIPAA, and GDPR requirements.
Conduct Internal Audits: Coordinate internal audits and readiness assessments to identify control gaps and recommend effective remediation actions.
Communicate Audit Insights: Provide clear, timely updates and expectations to internal teams regarding audit timelines, deliverables, and compliance outcomes.
Requirements
2–5 years of experience in internal auditing, compliance, or GRC roles
Familiarity with compliance frameworks such as ISO 27001, ISO 42001, HIPAA, and GDPR
Hands-on experience with GRC tools (Vanta preferred or other equivalent platforms)
Strong organizational and project management skills with the ability to handle multiple tasks simultaneously
Excellent verbal and written communication skills
High attention to detail and strong analytical thinking
Industry certifications (CISA, ISO Lead Auditor, or equivalent) are a plus but not required.
Nice to Have: Experience working with SaaS companies or compliance automation environments.
Background in information security or IT risk management.
Familiarity with evidence-based audit programs and process documentation.
Benefits
Career Development: Clear path with mentorship and training opportunities
Technical Training: Comprehensive onboarding on security and compliance frameworks
Competitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.
Growth Opportunity: Early-stage company with significant room for career advancement.
Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.