Lead Information Security Auditor (GRC)

Ladders; United States; Remote; USD 104,000 - 164,000; Full time

Benefits offered by this job

Healthcare

Disability insurance

401K with company match

Employee stock purchase plan

Tuition assistance

Job summary

Ladders is seeking a Lead Information Security Auditor (GRC) to guide the organization’s cybersecurity governance, risk, and compliance program with a strong emphasis on audit readiness and control effectiveness. You will help shape security policies, strengthen enterprise risk management practices, and ensure initiatives align with business and regulatory expectations.

The role partners with product development and third-party stakeholders to embed security requirements throughout the product

Qualifications

• Bachelor's degree in Cybersecurity, IT, Business, Engineering, Risk Management, or related field.
• 7+ years of cybersecurity, information security governance, risk management, compliance, or audit experience.
• Experience leading governance, risk, and compliance programs.
• Strong knowledge of cybersecurity frameworks and regulatory requirements.
• Experience in healthcare or regulated industries.

Responsibilities

• Lead development and maintenance of cybersecurity policies and governance frameworks.
• Establish governance processes aligning cybersecurity initiatives with business objectives.
• Conduct enterprise-wide cybersecurity risk assessments and manage risk registers.
• Oversee compliance efforts for SOX, ISO 27001, NIST, GDPR, and other regulations.
• Manage cybersecurity due diligence and risk assessments for third-party vendors.
• Partner with product development teams to embed cybersecurity requirements throughout the product lifecycle.
• Lead cybersecurity awareness and compliance initiatives across the organization.

Skills

Cybersecurity governance

Risk management

Audit

Regulatory knowledge

Education

Bachelor's degree in Cybersecurity/related field

Tools

Governance frameworks

Job description

For our client, we are seeking a Lead Information Security Auditor (GRC) to join the team of a leader in the Healthcare space.

This role will guide the organization’s cybersecurity governance, risk, and compliance program with a strong emphasis on audit readiness and control effectiveness. You will help shape security policies, strengthen enterprise risk management practices, and ensure cybersecurity initiatives align with business and regulatory expectations. The position also partners closely with product development and third-party stakeholders to embed security requirements throughout the product lifecycle and supplier ecosystem.

Location: Remote - US based candidates only, no visa sponsorship available

Compensation: $104,134 – $163,640 annually

Responsibilities

• Lead the development and maintenance of cybersecurity policies and governance frameworks
• Establish governance processes aligning cybersecurity initiatives with business objectives
• Conduct enterprise-wide cybersecurity risk assessments and manage risk registers
• Oversee compliance efforts for SOX, ISO 27001, NIST, GDPR, and other regulations
• Manage cybersecurity due diligence and risk assessments for third-party vendors
• Partner with product development teams to integrate cybersecurity requirements throughout the product lifecycle
• Lead cybersecurity awareness and compliance initiatives across the organization

Qualifications

• Bachelor's degree in Cybersecurity, IT, Business, Engineering, Risk Management, or a related field, or equivalent experience
• 7+ years of experience in cybersecurity, information security governance, risk management, compliance, or audit
• Experience developing and managing cybersecurity governance, risk, and compliance programs
• Strong understanding of cybersecurity frameworks and regulatory requirements
• Experience in healthcare, medical device manufacturing, or other regulated industries

Benefits

• Competitive compensation
• Excellent healthcare including medical, dental, vision, and prescription coverage
• Short- and long-term disability plus life insurance fully paid by the organization
• 401K retirement savings plan with dollar-for-dollar matching up to 7%
• Employee stock purchase plan at discounted prices
• Tuition assistance for undergraduate and graduate courses

Our client is an equal opportunity employer. We encourage you to apply even if you don’t meet every qualification—your background could be exactly what this team needs.