Remote Security Compliance Auditor: Risk & Audit Lead

Arancia; Philippines; Remote; PHP 1,200,000 - 2,100,000; Full time

Job summary

Arancia Technologies is seeking a Security Compliance Auditor to lead internal audits, assess regulatory gaps, and prep clients for external audits across SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, HITRUST CSF, FedRAMP, and NIST frameworks. You will map controls, guide risk remediation, and produce prioritized, actionable roadmaps for clients.

The role emphasizes risk management, policy development, evidence collection, and clear communication with technical staff and executives.

Qualifications

• Bachelor's degree in cybersecurity, IT, information systems, accounting or related field.
• 3–5 years of experience in IT audit, internal audit, security compliance, or cybersecurity consulting.
• Hands-on audits against at least two of SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, HITRUST CSF, FedRAMP, or NIST.
• Working knowledge of regulatory and external audit processes and evidence/documentation expectations.
• Strong understanding of risk management frameworks and methodologies such as NIST RMF, ISO 27005, or ISO 31000.

Responsibilities

• Lead internal audits, gap assessments, and readiness assessments against industry standards and regulatory frameworks.
• Apply risk management frameworks to identify, rate, and prioritize compliance and security risks.
• Develop remediation roadmaps linking gaps to risk, owners, effort and target dates.
• Prepare clients for external audits with scoping, evidence packages, and mock assessments.
• Deliver clear audit documentation, gap reports, findings, risk ratings, and recommendations.

Skills

Audit & compliance

Risk management

Regulatory frameworks

Education

Bachelor's degree in Cybersecurity / IT / IS / Accounting

Job description

Arancia Technologies is seeking a Security Compliance Auditor to lead internal audits, assess regulatory gaps, and prep clients for external audits across SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, HITRUST CSF, FedRAMP, and NIST frameworks. You will map controls, guide risk remediation, and produce prioritized, actionable roadmaps for clients.

The role emphasizes risk management, policy development, evidence collection, and clear communication with technical staff and executives.