Senior InfoSec Risk & Compliance Specialist

Ladders; United States; Remote; USD 102,000 - 138,000; Full time

Benefits offered by this job

Health benefits

Dental and vision benefits

401(k) match

Annual cash bonus

Pet insurance

Mental health resources

Volunteer PTO

Employee stock program

Job summary

Ladders is seeking a Senior InfoSec Risk & Compliance Specialist to strengthen a mature risk and compliance program in healthcare. You will partner with auditors and internal teams to ensure SOC 2, SOX, and PCI readiness while translating findings into prioritized risk actions.

This remote US-based role emphasizes practical governance, automation of compliance workflows, and building a scalable control environment that supports multiple obligations without adding headcount.

Qualifications

• 5–7+ years in IT Audit, GRC, controls, risk assessment, or internal audit.
• 1+ year in SOC 2 readiness or equivalent compliance work.
• Certifications: CISA/CISM/CISSP/CRISC/CRMA or eligible.
• Familiar with NIST, COSO, COBIT.
• Experience using AI tools for compliance tasks and building automated workflows.
• Ability to identify problems and implement technology-based improvements.
• Strong communication for mentoring and stakeholder management.

Responsibilities

• Support SOC 2, SOX, and PCI audits with auditors and internal teams.
• Design continuous monitoring systems to detect control failures in real time.
• Identify modernization opportunities in compliance processes.
• Connect compliance findings to organizational risk and prioritize remediation efforts.
• Build a flexible foundation of controls to meet multiple regulatory obligations without increasing headcount.
• Provide coaching and feedback to junior team members, fostering future leadership skills.
• Communicate updates and insights to business teams with a proactive approach.

Skills

IT Audit

GRC

Controls

Risk Assessment

Internal Audit

Education

CISA

CISM

CISSP

CRISC

CRMA

Tools

AI tools

Automation workflows

Job description

For our client, we are seeking a Senior InfoSec Risk & Compliance Specialist to join the team of a leader in the Healthcare space.

This role will support a mature risk and compliance function with a strong emphasis on audit readiness, control monitoring, and practical governance. The position will partner closely with internal teams and auditors to strengthen control environments, improve compliance processes, and help translate findings into meaningful risk priorities. It is also well suited for someone who enjoys building efficient, technology-enabled approaches that support multiple obligations without adding unnecessary complexity.

Location: Remote - US based candidates only, no visa sponsorship available

Compensation: $120,000+ annually

Responsibilities

• Support SOC 2, SOX, and PCI audits, coordinating with auditors and internal teams
• Design continuous monitoring systems to detect control failures in real time
• Identify and implement modernization opportunities in compliance processes
• Connect compliance findings to organizational risk and prioritize remediation efforts
• Build a flexible foundation of controls to meet multiple regulatory obligations without increasing headcount
• Provide coaching and feedback to junior team members, fostering future leadership skills
• Communicate updates and insights to business teams with a proactive approach

Qualifications

• 5-7+ years of experience in IT Audit, GRC, Controls, Risk Assessment, or Internal Audit; core audit skills are transferable
• 1+ year of experience with SOC 2 readiness assessments or similar compliance work
• Certification in CISA, CISM, CISSP, CRISC, CRMA, or eligibility for certification
• Familiarity with control and risk frameworks such as NIST, COSO, and COBIT
• Hands-on experience using AI tools for compliance tasks; experience building automated workflows is a plus
• Proven ability to identify problems and implement technology-based improvements independently
• Strong communication skills for relationship-building and mentoring

Benefits

• Health, dental, and vision benefits from day one
• 5% matching 401(k) plan
• Annual cash bonus opportunity
• Additional perks including pet insurance and mental health resources
• Volunteer paid time off and an employee stock program

Our client is an equal opportunity employer. We encourage you to apply even if you don’t meet every qualification—your background could be exactly what this team needs.