GRC Auditor – SecOps | Audit Readiness & Compliance

Bright Defense, LLC.; United States; On-site; USD 85,000 - 125,000; Full time

Job summary

A leading cybersecurity firm is looking for an Internal Auditor to join their SecOps Team. You will be responsible for conducting internal audits of security controls, ensuring compliance with standards such as ISO 27001 and SOC 2. The ideal candidate will have 3-4 years of experience in information security and strong communication skills for interacting with clients. This role is critical in helping customers maintain an audit-ready security posture and requires collaboration across various internal teams.

Qualifications

• 3-4 years’ experience as a GRC Analyst or Internal Auditor.
• Familiarity with ISO 27001, SOC 2, NIST CSF frameworks.
• Strong understanding of internal controls and audit processes.
• Ability to manage multiple audits simultaneously.
• Excellent communication for producing clear, concise reports.

Responsibilities

• Conduct internal audits verifying compliance with security frameworks.
• Review audit evidence and identify gaps with internal stakeholders.
• Maintain records of audit findings and corrective actions.
• Prepare organized audit reports for customers with clear communication.
• Support audit readiness initiatives before external audits.

Skills

GRC Analysis

Audit Communication

Organizational Skills

Stakeholder Collaboration

Job description

A leading cybersecurity firm is looking for an Internal Auditor to join their SecOps Team. You will be responsible for conducting internal audits of security controls, ensuring compliance with standards such as ISO 27001 and SOC 2. The ideal candidate will have 3-4 years of experience in information security and strong communication skills for interacting with clients. This role is critical in helping customers maintain an audit-ready security posture and requires collaboration across various internal teams.