Audit & Assurance Specialist: GRC & Security Controls

Lumin Digital; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Insurance

401(k) match

Flexible PTO

Paid sick leave

Parental leave

Lifestyle spending account

Tuition reimbursement

Cell phone stipend

Job summary

Lumin Digital is seeking an Audit and Assurance Specialist to join the Risk organization. You will design, monitor, and improve security and compliance controls across SOC 2, PCI DSS, ISO 27001, and HIPAA, ensuring they strengthen security beyond checkbox compliance.

You will coordinate with Engineering, Product, and Operations, conduct control testing, maintain dashboards, manage POA&M, support external audits, and contribute to AI governance and vendor security efforts.

Qualifications

• 4+ years in information security, GRC, compliance, or IT audit.
• Experience designing and improving security controls in a GRC platform.
• Experience coordinating external audits or assessments.
• Experience in regulated financial services or fintech SaaS environments.

Responsibilities

• Design, implement security and compliance controls across SOC 2, PCI DSS, ISO 27001, and HIPAA, ensuring controls strengthen security beyond checkbox requirements.
• Assess design and operating effectiveness of controls and drive improvements.
• Collaborate with Engineering, Product, Operations to ensure enforceable controls and credible security.
• Conduct structured control testing with evidence review, interviews, and configuration validation.
• Maintain dashboards and POA&M process; escalate trends and remediation status.
• Support external audits and assessments (SOC 2, PCI DSS, ISO 27001, HIPAA) and client engagements.
• Assist AI assurance testing: model risk, data lineage, AI questionnaire responses.

Skills

Security controls

Compliance controls

GRC platforms

Audit coordination

SOC 2

PCI DSS

ISO 27001

HIPAA

AI governance

Regulatory frameworks

Education

Bachelor’s degree in Information Systems, Business, or Risk Management

CISA

Security+

CRISC

ISO 27001 Lead Implementer/Auditor

Tools

TrustCloud

OneTrust

Drata

Job description

Lumin Digital is seeking an Audit and Assurance Specialist to join the Risk organization. You will design, monitor, and improve security and compliance controls across SOC 2, PCI DSS, ISO 27001, and HIPAA, ensuring they strengthen security beyond checkbox compliance.

You will coordinate with Engineering, Product, and Operations, conduct control testing, maintain dashboards, manage POA&M, support external audits, and contribute to AI governance and vendor security efforts.