Job Description:
The Senior Security Auditor leads complex and high-risk security audits across our cybersecurity, cloud, and software development environments. As a key technical leader, you ensure our security controls are effective, provide audit expertise, and mentor junior team members—all while balancing independence and cross-department collaboration.
Responsibilities:
- Lead and execute end-to-end audits for AWS, on-premises, SDLC, IAM, and key SaaS platforms.
- Develop engagement scopes, audit programs, and translate security frameworks (NIST
CSF 2.0, NIST 800-53, PCI DSS, FTC
Safeguards) into test procedures.
- Assess controls through walkthroughs, configuration reviews, and log analysis; draft clear, actionable findings and remediation recommendations.
- Guide
NIST CSF 2.0
maturity assessments and document gaps.
- Serve as audit liaison during external assessments, preparing evidence and managing requests.
- Mentor mid
- and junior auditors in methodologies and standards.
- Track and validate remediation of findings.
- Contribute to team operations, process improvements, and automation efforts.
#
LI-Remote Requirements:
8+ years' experience in security/IT audit or technical risk roles, leading audits independently. Deep knowledge of AWS cloud security and infrastructure-as-code. Strong understanding of
NIST CSF 2.0, NIST 800-53, PCI
DSS, and FTC Safeguards, with practical application experience. Experience auditing SDLC, code reviews, CI/CD, and vulnerability management. Proficiency with identity providers (e.g., Okta), SSO, and privileged access. Excellent written communication and ability to produce executive-level reports. Proven mentoring and leadership skills. Certifications (CISA, CISSP, CCSP, AWS Security Specialty, QSA) strongly preferred. Experience in regulated industries (automotive, industrial, etc.) is a plus. Able to maintain objectivity and strong working relationships with control owners.
Qualifications:
8+ years' experience in security/IT audit or technical risk roles, leading audits independently.. Deep knowledge of AWS cloud security and infrastructure-as-code.. Strong understanding of
NIST CSF 2.0, NIST 800-53, PCI
DSS, and FTC Safeguards, with practical application experience.. Experience auditing SDLC, code reviews, CI/CD, and vulnerability management.. Proficiency with identity providers (e.g., Okta), SSO, and privileged access.. Excellent written communication and ability to produce executive-level reports.. Proven mentoring and leadership skills.. Certifications (CISA, CISSP, CCSP, AWS Security Specialty, QSA) strongly preferred.. Experience in regulated industries (automotive, industrial, etc.) is a plus.. Able to maintain objectivity and strong working relationships with control owners.