Senior Tech Risk & Audit Leader (Remote)

Picus Security Inc.; Çankaya; Remote; TRY 5,897,000 - 8,845,000; Full time

Job summary

Picus Security seeks a Senior Technology Risk & Audit Specialist to advance governance, risk, and compliance at scale. You will run ongoing assurance with engineering teams, own global certification programs, and advise business and tech units on scalable risk-aware processes in a cloud-native, AI-driven environment.

You will plan risk-based IT/audit activities, evaluate control effectiveness, manage findings end-to-end, and lead global compliance programs across ISO/IEC standards and SOC 2.

Qualifications

• 6+ years of hands-on experience in IT audit, information security, risk and compliance.
• Product Security & Secure SDLC: evaluate software engineering processes from an audit and assurance perspective.
• Technical Fluency: understand cloud infrastructure, IAM, SIEM, and CI/CD pipelines.
• Framework Expertise: ISO/IEC 27001, 27701, SOC 2 Type 2, NIST frameworks including audit coordination.
• Strategic Execution: translate international standards into scalable processes.
• Regulatory Knowledge: GDPR, KVKK, CCPA and third-party risk management.
• Communication & Influence: strong English, write clear policies and influence stakeholders.
• Nice to have: ISACA certifications (CISA, CISM, CRISC) and CSA STAR experience.

Responsibilities

• Plan and execute risk-based IT and internal audits focusing on secure SDLC and AI security.
• Evaluate and improve security controls and governance policies.
• Manage audit findings end-to-end with sustainable remediation.
• Lead global compliance programs (ISO/IEC 27001, 22301, 27701, SOC 2, NIST CSF) for audit readiness.
• Support Third-Party Risk Management through SaaS security assessments.
• Define and track audit/compliance metrics for leadership reporting.
• Assess privacy and risk of emerging technologies (AI/ML) for secure adoption.

Skills

6+ years experience

Product Security

Secure SDLC

Cloud infrastructure

ISO/IEC 27001

SOC 2 Type 2

NIST frameworks

CISA

CISM

CRISC

CSA STAR

Job description

Picus Security seeks a Senior Technology Risk & Audit Specialist to advance governance, risk, and compliance at scale. You will run ongoing assurance with engineering teams, own global certification programs, and advise business and tech units on scalable risk-aware processes in a cloud-native, AI-driven environment.

You will plan risk-based IT/audit activities, evaluate control effectiveness, manage findings end-to-end, and lead global compliance programs across ISO/IEC standards and SOC 2.