Remote Senior InfoSec Auditor | FedRAMP & CMMC

Ladders; United States; Remote; USD 119,000 - 158,000; Full time

Benefits offered by this job

Healthcare coverage

Dental coverage

Parental planning and mental health

Disability income and life insurance

Job summary

Ladders is seeking a Senior Information Security Internal Auditor to lead and strengthen the internal audit program for information security in a remote, US-based capacity.

The role partners with Engineering and DevOps to translate security and regulatory requirements into practical controls and workflows, with a focus on continuous monitoring, automated evidence collection, and clear reporting for audits and stakeholders.

Qualifications

• Minimum three years in security, compliance consulting, or assessments in a technical setting.
• Experience with major compliance frameworks like CMMC, FedRAMP, or ISO 27001.
• Proficient in cloud security and DevSecOps practices.
• Familiarity with Infrastructure as Code tools like Terraform.
• Strong documentation and reporting skills for audit processes.
• Ability to communicate technical risks to non-technical stakeholders.
• Certifications such as CISSP, CIA, or CISA are advantageous.
• Must be a U.S. citizen eligible for a Secret clearance.

Responsibilities

• Develop and maintain the internal audit program for information security.
• Ensure compliance with FedRAMP, CMMC, and related standards.
• Translate security framework requirements into actionable controls for engineering teams.
• Collaborate with Engineering and DevOps to integrate security controls into workflows.
• Conduct monthly continuous monitoring assessments and manage documentation.
• Serve as a technical liaison during audits, explaining architecture and controls.
• Lead efforts in automating evidence collection across various platforms and systems.
• Create and maintain audit plans, reports, and organized documentation.

Skills

Internal audit

Regulatory compliance

Cloud security

DevSecOps

Documentation

Risk communication

Tools

Terraform

Job description

Ladders is seeking a Senior Information Security Internal Auditor to lead and strengthen the internal audit program for information security in a remote, US-based capacity.

The role partners with Engineering and DevOps to translate security and regulatory requirements into practical controls and workflows, with a focus on continuous monitoring, automated evidence collection, and clear reporting for audits and stakeholders.