Senior Technology Risk & Assurance Lead

Picus Security Inc.; Çankaya; Remote; TRY 600,000 - 1,000,000; Full time

Job summary

Picus Security, a leader in exposure validation, seeks a Senior Technology Risk & Audit Specialist. The role strengthens governance, risk, and compliance at scale, owning global certification programs and advising engineering teams across a cloud-native, AI-driven platform.

You will plan risk-based IT audits, drive continuous control improvements, manage audit findings, and oversee global compliance programs including ISO/IEC 27001, SOC 2, NIST CSF, CSA STAR.

Qualifications

• 6+ years hands-on IT audit, information security, risk and compliance in SaaS/cloud environments.
• Experience evaluating software engineering processes from an audit perspective (CI/CD, SBOM governance).
• Strong understanding of cloud infra, IAM, SIEM, and CI/CD pipelines.
• Hands-on ISO/IEC 27001/27701, SOC 2 Type 2, and NIST frameworks experience.
• Ability to translate standards into scalable processes that enable innovation.

Responsibilities

• Plan and execute risk-based IT and internal audits focusing on secure SDLC, cloud infra, and AI security.
• Evaluate and enhance governance controls; drive continuous improvement.
• Manage audit findings end-to-end with sustainable remediation.
• Lead global compliance programs (ISO/IEC 27001, 22301, 27701, 20000-1, SOC 2, NIST CSF, CSA STAR).
• Support Third-Party Risk Management through SaaS security assessments and due diligence.

Skills

IT audit

risk & compliance management

communication & influence

English proficiency

regulatory knowledge

cloud-native / SaaS security

strategic execution

Education

CISA

CISM

CRISC

Tools

ISO 27001

SOC 2 Type 2

NIST CSF

CSA STAR

Job description

Picus Security, a leader in exposure validation, seeks a Senior Technology Risk & Audit Specialist. The role strengthens governance, risk, and compliance at scale, owning global certification programs and advising engineering teams across a cloud-native, AI-driven platform.

You will plan risk-based IT audits, drive continuous control improvements, manage audit findings, and oversee global compliance programs including ISO/IEC 27001, SOC 2, NIST CSF, CSA STAR.