Remote Senior InfoSec Internal Auditor – FedRAMP/CMMC

Everbridge; United States; Remote; USD 119,000 - 158,000; Full time

Job summary

Everbridge, a leading provider of critical event management, is seeking a Senior Information Security Internal Auditor for a fully remote role in the United States. You will build and maintain the internal audit program, align it with FedRAMP and CMMC, and work with Engineering, DevOps and Security to implement robust controls across cloud environments.

You will drive continuous monitoring, coordinate certification efforts, and serve as a liaison during audits while enhancing the GRC platform

Qualifications

• At least three years of security, assessments, compliance consulting or advisory work in a highly technical environment.
• At least three years of experience performing or supporting technical assessments for major compliance efforts such as CMMC, FedRAMP, SOC 2, BSI C5 or ISO 27001.
• Experience with CMMC, DFARS, NIST SP 800-171, FedRAMP, NIST SP 800-53, FISMA or similar frameworks.
• Experience in cloud security, platform engineering or DevSecOps.
• Experience with Infrastructure as Code such as Terraform and integrating security tools into CI/CD pipelines.
• Strong ability to document and report processes, metrics and status.
• Ability to explain technical risk to non-technical stakeholders and translate audit requirements for engineers.
• Clear communication and organizational skills with initiative to influence decisions.
• Certification in CISSP/CISA/CCSP/CySA+/ISO 27001 Auditor is a plus, and U.S. citizenship with ability to obtain Secret clearance.

Responsibilities

• Develop and maintain the information security internal audit program within Compliance, aligned with FedRAMP and CMMC.
• Maintain Everbridge’s Information Security and Privacy Framework including policies, procedures and standards.
• Translate framework requirements into testable controls for engineering teams.
• Partner with Engineering, DevOps and Security to integrate controls into workflows.
• Own monthly continuous monitoring assessments and submissions.
• Coordinate with Engineering and Operations to deliver FedRAMP and CMMC documentation on time.
• Serve as technical point of contact during audits and explain architecture, data flows and evidence.
• Represent Compliance in FedRAMP, CMMC and other certification projects.
• Build automated evidence collection across cloud platforms and CI/CD pipelines.
• Develop policy-as-code and continuous control checks using tools like OPA, Cloud Custodian or AWS Config.
• Own and improve the GRC platform and integrations.
• Create audit plans and maintain organized documentation and evidence.
• Develop approaches for continuous monitoring and recertification; support external audits as needed.

Skills

Security assessments

Compliance consulting

Risk communication

Stakeholder influence

Auditing

Policy development

Education

CISSP/CISA/CCSP/CySA+/ISO 27001 Auditor (optional)

Tools

Terraform

CI/CD pipelines

Job description

Everbridge, a leading provider of critical event management, is seeking a Senior Information Security Internal Auditor for a fully remote role in the United States. You will build and maintain the internal audit program, align it with FedRAMP and CMMC, and work with Engineering, DevOps and Security to implement robust controls across cloud environments.

You will drive continuous monitoring, coordinate certification efforts, and serve as a liaison during audits while enhancing the GRC platform