Security Compliance & Audit Readiness Specialist

Harris Computer; Yuma (AZ); On-site; USD 80,000 - 90,000; Full time

Benefits offered by this job

Health benefits

RRSP matching

Stock options

Career development

Job summary

Harris Computer is seeking a Security Guidance for Certification Readiness professional to advise business units on applicable security requirements for SOC 2, ISO 27001, PCI DSS, HIPAA and Nacha. You will review security docs, identify gaps before external audits, and guide proactive evidence collection.

You will coordinate with internal audit teams and shared services to scope audits, ensure documentation supports evidence requests, and propose controls and improvements for audit readiness

Qualifications

• Three or more years of relevant experience assessing security and compliance requirements, including hands-on evaluation of technical security controls and supporting audits.
• Experience advising on security controls required for SOC 2 Type II, ISO 27001, PCI DSS, HIPAA, and Nacha requirements.
• Familiarity with common security evidence requirements referenced during audits (e.g., patching reports, password settings, penetration test results).

Responsibilities

• Advises business units on security requirements applicable to their certification, attestation, assessment, or regulatory scope (e.g., SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, and Nacha requirements)
• Reviews security documentation, policies, and procedures for completeness and alignment with certification requirements and other applicable security and compliance obligations
• Identifies security-related gaps that may need remediation prior to an external audit
• Advises on proactive evidence collection and early evidence gathering rather than waiting for detailed requests
• Reviews documentation practices to confirm they will hold up to auditor scrutiny from a security perspective
• Provides security-focused input on how shared services and corporate/administrative support functions should be classified within the audit scope
• Advises on scenarios where a business unit relies on a shared services provider for security-relevant reporting
• Recommends involving the shared services provider as early as possible in the audit process
• Recommends security controls and improvements needed to satisfy framework requirements
• Provides guidance on password settings, patching cadence, and other technical security configurations
• Reviews penetration test scope and results from a security standpoint to determine evidence sufficiency
• Works in coordination with the business unit's internal audit team and external auditors throughout the process
• Participates in audit planning discussions to ensure security evidence and controls are appropriately represented
• Supports communication between the business unit and any shared services or corporate support functions
• Assists in tracking security-related audit findings through remediation and closure
• Collaborates with corporate support functions when their services fall within audit scope

Skills

Attention to Detail

Analytical Thinking

Communication Proficiency

Advisory/Consultative Skills

Collaboration

Project Coordination

Education

Bachelor's degree in Information Security, Computer Science, or related field

Job description

Harris Computer is seeking a Security Guidance for Certification Readiness professional to advise business units on applicable security requirements for SOC 2, ISO 27001, PCI DSS, HIPAA and Nacha. You will review security docs, identify gaps before external audits, and guide proactive evidence collection.

You will coordinate with internal audit teams and shared services to scope audits, ensure documentation supports evidence requests, and propose controls and improvements for audit readiness