Audit & Assurance Specialist, GRC & AI Security

OpenKrill; United States; À distance; USD 120 000 - 165 000; Plein temps

Résumé du poste

Lumin Digital is seeking an Audit and Assurance Specialist to design and monitor security controls across SOC 2, PCI DSS, ISO 27001, and HIPAA within its Risk organization. You will execute control testing, manage POA&M, and liaise with external auditors to strengthen the company’s security posture.

The role requires deep knowledge of regulatory frameworks, hands-on experience with GRC processes, and the ability to drive improvements across cross-functional teams.

Qualifications

• Bachelor’s degree in Information Systems, Business, or Risk Management preferred.
• CISA, Security+, CRISC, ISO 27001 Lead Implementer/Auditor certifications preferred.

Responsabilités

• Design, document, and implement security and compliance controls across SOC 2, PCI DSS, ISO 27001, HIPAA.
• Assess design and operating effectiveness of controls and drive improvements.
• Collaborate with Engineering, Product, Operations to ensure practical controls.
• Conduct structured control testing with evidence review and interviews.
• Maintain dashboards showing control coverage, maturity, and trends.
• Manage POA&M process including issue intake and remediation closure.
• Liaise with external audits and assessments (SOC 2, PCI DSS, ISO 27001, HIPAA).
• Coordinate auditor document requests and evidence collection.
• Execute internal audit program with testing procedures and drafting reports.
• Complete security questionnaires and respond to RFPs and vendor due diligence.
• Support AI assurance with control testing for AI/ML systems.
• Maintain library of standardized questionnaire responses and share learnings.
• Monitor regulatory changes and advise on compliance.

Connaissances

Security controls design

Audit & assurance

Regulatory frameworks

Project coordination

Communication skills

Formation

Bachelor's degree

CISA

Security+

CRISC

ISO 27001 Lead Implementer/Auditor

Outils

TrustCloud

OneTrust

Drata

Description du poste

Lumin Digital is seeking an Audit and Assurance Specialist to design and monitor security controls across SOC 2, PCI DSS, ISO 27001, and HIPAA within its Risk organization. You will execute control testing, manage POA&M, and liaise with external auditors to strengthen the company’s security posture.

The role requires deep knowledge of regulatory frameworks, hands-on experience with GRC processes, and the ability to drive improvements across cross-functional teams.