Remote Lead Information Security Auditor (GRC)

Ladders; United States; Remote; USD 104,000 - 164,000; Full time

Benefits offered by this job

Healthcare

Disability insurance

401K with company match

Employee stock purchase plan

Tuition assistance

Job summary

Ladders is seeking a Lead Information Security Auditor (GRC) to guide the organization’s cybersecurity governance, risk, and compliance program with a strong emphasis on audit readiness and control effectiveness. You will help shape security policies, strengthen enterprise risk management practices, and ensure initiatives align with business and regulatory expectations.

The role partners with product development and third-party stakeholders to embed security requirements throughout the product

Qualifications

• Bachelor's degree in Cybersecurity, IT, Business, Engineering, Risk Management, or related field.
• 7+ years of cybersecurity, information security governance, risk management, compliance, or audit experience.
• Experience leading governance, risk, and compliance programs.
• Strong knowledge of cybersecurity frameworks and regulatory requirements.
• Experience in healthcare or regulated industries.

Responsibilities

• Lead development and maintenance of cybersecurity policies and governance frameworks.
• Establish governance processes aligning cybersecurity initiatives with business objectives.
• Conduct enterprise-wide cybersecurity risk assessments and manage risk registers.
• Oversee compliance efforts for SOX, ISO 27001, NIST, GDPR, and other regulations.
• Manage cybersecurity due diligence and risk assessments for third-party vendors.
• Partner with product development teams to embed cybersecurity requirements throughout the product lifecycle.
• Lead cybersecurity awareness and compliance initiatives across the organization.

Skills

Cybersecurity governance

Risk management

Audit

Regulatory knowledge

Education

Bachelor's degree in Cybersecurity/related field

Tools

Governance frameworks

Job description

Ladders is seeking a Lead Information Security Auditor (GRC) to guide the organization’s cybersecurity governance, risk, and compliance program with a strong emphasis on audit readiness and control effectiveness. You will help shape security policies, strengthen enterprise risk management practices, and ensure initiatives align with business and regulatory expectations.

The role partners with product development and third-party stakeholders to embed security requirements throughout the product