Senior IT Audit & Compliance Leader (Hybrid)

Tanium; Bellevue (WA); Hybrid; USD 101,000 - 155,000; Full time

Job summary

Tanium, an Autonomous IT company, seeks an IT Audit Manager to lead a global audit program, build methodology, and drive remediation of control gaps. This hybrid role requires in-person presence several days per week in Bellevue, WA and other U.S.

locations. Responsibilities include expanding the audit program, coaching a distributed team, and reporting KPIs to leadership while ensuring compliance with frameworks such as NIST, ISO 27001, and SOC 2 Type II.

Qualifications

• Experience leading audit and compliance programs across multiple frameworks and certifications.
• Experience managing a distributed global team of auditors across time zones.
• Strong ability to develop audit methodology, templates, and KPIs.

Responsibilities

• Leads and expands Tanium’s audit program.
• Develops and implements audit methodology, processes, and templates.
• Leads and coaches a globally distributed team of auditors.
• Reports on KPI performance to leadership.
• Coordinates with external auditors and assessors on program logistics.
• Ensures remediation plans and milestones are established for gaps.
• Advises leadership on findings, weaknesses, and risk mitigation.
• Monitors regulatory changes impacting the program.
• Partners to implement audit principles across the organization.

Skills

Audit leadership

Compliance programs

Framework knowledge

ISO 27001

SOC 2 Type II

NIST SP 800 series

CISSP/CISM/CISA

Global team leadership

Education

Bachelor's Degree in a related field

CISSP, CISM, CISA certification preferred

Job description

Tanium, an Autonomous IT company, seeks an IT Audit Manager to lead a global audit program, build methodology, and drive remediation of control gaps. This hybrid role requires in-person presence several days per week in Bellevue, WA and other U.S.

locations. Responsibilities include expanding the audit program, coaching a distributed team, and reporting KPIs to leadership while ensuring compliance with frameworks such as NIST, ISO 27001, and SOC 2 Type II.