Senior Information Security Internal Auditor

Ladders; United States; Remote; USD 119,000 - 158,000; Full time

Benefits offered by this job

Healthcare coverage

Dental coverage

Parental planning and mental health

Disability income and life insurance

Job summary

Ladders is seeking a Senior Information Security Internal Auditor to lead and strengthen the internal audit program for information security in a remote, US-based capacity.

The role partners with Engineering and DevOps to translate security and regulatory requirements into practical controls and workflows, with a focus on continuous monitoring, automated evidence collection, and clear reporting for audits and stakeholders.

Qualifications

• Minimum three years in security, compliance consulting, or assessments in a technical setting.
• Experience with major compliance frameworks like CMMC, FedRAMP, or ISO 27001.
• Proficient in cloud security and DevSecOps practices.
• Familiarity with Infrastructure as Code tools like Terraform.
• Strong documentation and reporting skills for audit processes.
• Ability to communicate technical risks to non-technical stakeholders.
• Certifications such as CISSP, CIA, or CISA are advantageous.
• Must be a U.S. citizen eligible for a Secret clearance.

Responsibilities

• Develop and maintain the internal audit program for information security.
• Ensure compliance with FedRAMP, CMMC, and related standards.
• Translate security framework requirements into actionable controls for engineering teams.
• Collaborate with Engineering and DevOps to integrate security controls into workflows.
• Conduct monthly continuous monitoring assessments and manage documentation.
• Serve as a technical liaison during audits, explaining architecture and controls.
• Lead efforts in automating evidence collection across various platforms and systems.
• Create and maintain audit plans, reports, and organized documentation.

Skills

Internal audit

Regulatory compliance

Cloud security

DevSecOps

Documentation

Risk communication

Tools

Terraform

Job description

For our client, we are seeking a Senior Information Security Internal Auditor to join the team of a leader in the Technical Services space.

This role will lead the internal audit program for information security and help strengthen compliance across a technical environment. You will partner closely with Engineering and DevOps teams to translate security and regulatory requirements into practical controls and workflows. The position also plays a key role in continuous monitoring, evidence collection automation, and clear reporting for audits and stakeholders.

Location: Remote - US based candidates only, no visa sponsorship available

Compensation: $118,700 – $158,200 annually

Responsibilities

• Develop and maintain the internal audit program for information security
• Ensure compliance with FedRAMP, CMMC, and related standards
• Translate security framework requirements into actionable controls for engineering teams
• Collaborate with Engineering and DevOps to integrate security controls into workflows
• Conduct monthly continuous monitoring assessments and manage documentation
• Serve as a technical liaison during audits, explaining architecture and controls
• Lead efforts in automating evidence collection across various platforms and systems
• Create and maintain audit plans, reports, and organized documentation

Qualifications

• Minimum three years in security, compliance consulting, or assessments in a technical setting
• Experience with major compliance frameworks like CMMC, FedRAMP, or ISO 27001
• Proficient in cloud security and DevSecOps practices
• Familiarity with Infrastructure as Code tools like Terraform
• Strong documentation and reporting skills for audit processes
• Ability to communicate technical risks to non-technical stakeholders
• Certifications such as CISSP, CIA, or CISA are advantageous
• Must be a U.S. citizen eligible for a Secret clearance

Benefits

• Comprehensive healthcare and dental coverage
• Parental planning and mental health support
• Disability income and life insurance benefits401(k) plan with matching contributions
• Generous paid time off policy
• Fitness reimbursement program

Our client is an equal opportunity employer. We encourage you to apply even if you don’t meet every qualification—your background could be exactly what this team needs.