Internal Security Compliance Auditor

Jobgether; Brasil; À distance; BRL 192 000 - 357 000; Plein temps

Avantages offerts par ce poste

Competitive compensation

Equity

Health & wellness

PTO 20 days + 8 holidays

Remote-first

Team off-sites

Autonomy

Meaningful work

Collaborative culture

Résumé du poste

Jobgether is seeking an Internal Security Compliance Auditor based in Brazil to strengthen cybersecurity compliance programs across major frameworks such as SOC 2, ISO 27001, PCI, HIPAA and GDPR.

You will review controls, validate evidence, and ensure client materials meet external audit requirements in a remote-first, collaborative environment. This role offers autonomy, meaningful impact, and opportunities to shape compliance tooling.

Qualifications

• Deep understanding of SOC 2, ISO 27001, PCI, HIPAA and GDPR requirements.
• Strong knowledge of information security controls and supporting docs.
• Experience reviewing evidence for external audits and pre-audit prep.

Responsabilités

• Conduct internal reviews of client-submitted evidence across frameworks.
• Perform quality checks on security controls and supporting documentation.
• Lead final readiness reviews before client engagement with auditors.
• Identify gaps and weaknesses; recommend improvements for audit readiness.
• Maintain and improve internal QA standards and audit prep procedures.
• Create guidance materials to improve evidence quality and consistency.
• Collaborate with Security Program Engineers/Managers to address gaps.
• Monitor regulatory changes to keep reviews aligned with standards.
• Track readiness metrics and suggest process improvements.
• Provide feedback to product teams to enhance compliance platform.

Connaissances

SOC 2

ISO 27001

PCI

HIPAA

GDPR

Documentation review

Audit readiness

Analytical skills

Independent work

Regulatory awareness

Formation

CISA

ISO 27001 Lead Auditor

Description du poste

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Internal Security Compliance Auditor based in Brazil.

We are looking for a detail-oriented Internal Security Compliance Auditor to strengthen the quality and reliability of cybersecurity compliance programs across multiple client engagements. In this role, you will review security controls, validate supporting documentation, and ensure client evidence meets the requirements of major regulatory and industry frameworks. You will work closely with Security Program Managers and engineering teams to identify compliance gaps and prepare organizations for successful external audits. Your expertise will contribute to maintaining high-quality standards across SOC 2, ISO 27001, PCI, HIPAA, and GDPR requirements. You will also help improve internal quality assurance methodologies and provide valuable feedback to enhance compliance processes and technology. This is an opportunity to join a fast-growing, remote-first cybersecurity environment where autonomy, collaboration, and meaningful impact are highly valued.

Accountabilities

• Conduct thorough internal reviews of client-submitted evidence across multiple compliance frameworks, including SOC 2, ISO 27001, PCI, HIPAA, and GDPR.
• Perform detailed quality assurance checks on individual security controls to verify the completeness, accuracy, and sufficiency of supporting documentation.
• Execute comprehensive final readiness reviews before clients engage with third-party auditing firms.
• Identify evidence gaps, documentation weaknesses, and control deficiencies, recommending practical improvements to strengthen audit readiness.
• Develop, maintain, and improve internal quality assurance standards, review methodologies, and audit preparation procedures.
• Create guidance materials and documentation to help clients improve the quality and consistency of their compliance evidence.
• Collaborate with Security Program Engineers and Security Program Managers to address compliance gaps and resolve technical documentation issues.
• Monitor changes in regulatory requirements and industry standards to ensure internal reviews remain aligned with evolving compliance frameworks.
• Track audit readiness metrics, evaluate review effectiveness, and identify opportunities to improve internal processes.
• Provide expert feedback to product teams to enhance compliance platform capabilities and improve the overall pre-audit preparation experience.

Requirements:

• Deep understanding of SOC 2, ISO 27001, PCI, HIPAA, and GDPR requirements.
• Strong technical knowledge of information security controls, their implementation, and supporting documentation.
• Proven experience reviewing and evaluating evidence for compliance audits, particularly in preparing organizations for external assessments.
• Previous experience conducting pre-audit preparation, internal compliance reviews, and quality assurance activities across multiple frameworks.
• Exceptional attention to detail and a strong quality control mindset.
• Excellent written communication skills, with the ability to document findings, explain deficiencies, and provide clear recommendations.
• Ability to work independently, manage multiple client engagements, and consistently deliver high-quality reviews.
• Familiarity with compliance automation platforms and security governance tools.
• Strong analytical and problem-solving skills, with the ability to identify weaknesses and recommend effective corrective actions.

Additional qualifications that would be advantageous:

• Relevant professional certifications, such as CISA or ISO 27001 Lead Auditor.
• Experience working with multiple cybersecurity and regulatory compliance frameworks.
• Previous involvement in developing internal audit methodologies, evidence review standards, or compliance quality assurance processes.

Benefits:

• Competitive Compensation: Annual base salary benchmarked according to location, skills, experience, and relevant qualifications. The advertised US baseline range is $35,000–$65,000 USD.
• Equity: Opportunity to participate in company equity compensation.
• Health & Wellness: Comprehensive health and wellness benefits.
• Paid Time Off: 20 days of annual paid time off, plus 8 floating holidays.
• Remote Work: Fully remote, remote-first working environment with global hiring opportunities where compliant employment arrangements are available.
• International Team Events: Opportunities to participate in team off-sites in destinations such as Amsterdam and Italy.
• Professional Autonomy: A collaborative culture that values ownership, individual impact, and independence over micromanagement.
• Meaningful Work: Opportunity to solve complex cybersecurity and compliance challenges while contributing to the development of innovative security solutions.
• Collaborative Environment: Work alongside experienced, ambitious, and supportive professionals in the cybersecurity industry.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.