Security, Risk & Compliance Auditor: Automate & Improve Controls

coupa-software-inc-ats-1; Reno (TX); On-site; USD 95,000 - 150,000; Full time

Benefits offered by this job

Global Wellness Days

Birthday Time-Off

Volunteer Time Off

Employee Assistance Program (EAP)

Business Travel Protection

Referral Bonus

Job summary

Coupa is seeking an IT Security, Risk, and Compliance Auditor to evaluate, strengthen, and automate the organization’s security controls and compliance posture across on‑prem and cloud environments.

You will conduct technical audits, implement automated control testing, and work with IT, security, and business units to improve control design and ensure alignment with standards such as ISO 27001, SOC 2, PCI DSS, NIST CSF, HIPAA, and FedRAMP.

Qualifications

• 3+ years in IT security auditing, technical risk assessments, or compliance.
• Strong knowledge of security frameworks (ISO 27001, SOC 2, PCI DSS, NIST CSF, HIPAA, FedRAMP).
• Experience with GRC platforms, compliance automation, control testing tools, and evidence collectionSystems.

Responsibilities

• Conduct technical audits & risk assessments of infrastructure, applications and cloud environments.
• Leverage automation & tools for automated control testing and evidence collection.
• Evaluate and improve security controls: access management, encryption and vulnerability management.
• Produce audit reports, dashboards, and presentations for technical and executive audiences.
• Partner with IT, security and business teams to drive remediation and continuous improvement.

Skills

Security auditing

Risk assessments

Compliance frameworks

GRC platforms

Audit tools

Communication

Education

Bachelor's degree in IT or Cybersecurity

Tools

AuditBoard

Drata

Splunk

Qualys

AWS Security Hub

Job description

Coupa is seeking an IT Security, Risk, and Compliance Auditor to evaluate, strengthen, and automate the organization’s security controls and compliance posture across on‑prem and cloud environments.

You will conduct technical audits, implement automated control testing, and work with IT, security, and business units to improve control design and ensure alignment with standards such as ISO 27001, SOC 2, PCI DSS, NIST CSF, HIPAA, and FedRAMP.