Technology Compliance Consultant

Cypress HCM; Lehi (UT); Hybrid; USD 157,046,000 - 172,200,000; Full time

Benefits offered by this job

401k

Hybrid schedule

Job summary

Cypress HCM in Lehi, UT is seeking a Technology GRC professional to support continuous auditing and monitoring for compliance objectives. You will draft reports, identify control issues, and work with TechGRC teams across geographies to ensure audit readiness and service readiness.

Responsibilities include coordinating remediation across IT and business teams and supporting external audit engagements. Requires 2–4 years in cybersecurity or security compliance and cloud experience

Qualifications

• 2-4 years of experience in cybersecurity or security compliance.
• Hands-on experience with AWS, Azure, and GCP environments.
• Knowledge of compliance frameworks such as SOC 2, PCI, ISO 27001, HITRUST, and HIPAA.
• Familiarity with core IT processes/services like SDLC and Identity/User Access Management.

Responsibilities

• Execute continuous auditing and monitoring activities to support compliance objectives.
• Prepare compliance reports that summarize objectives, findings, and remediation steps.
• Identify and document internal control issues; determine root causes and track remediation.
• Coordinate with cross-functional IT and business teams to remediate findings and ensure service readiness for external audits.
• Support external audit engagements and readiness activities for compliance frameworks.

Skills

Cybersecurity

Cloud security

Stakeholder communication

Audit/compliance

Education

Bachelor's degree in Information Technology or Computer Science

Master's degree in Information Technology or Computer Science

Tools

AWS

Azure

GCP

Job description

• Location: Lehi, UT 84043 (Hybrid, 2 to 3 days onsite)
• Fulltime Contract w/ extensions
• Team: CCF US

Job Description

• Support the Technology GRC (TechGRC) group in continuous auditing and monitoring to meet compliance requirements.
• Work under the supervision of the TechGRC manager to drive technology compliance activities, external audit readiness, and service readiness.
• Draft compliance reports summarizing objectives, key findings, and remediation actions; identify internal control issues and root causes.
• Collaborate and coordinate with TechGRC teams across multiple geographies.

Responsibilities

• Execute continuous auditing and monitoring activities to support compliance objectives.
• Prepare compliance reports that summarize objectives, findings, and recommended remediation steps.
• Identify and document internal control issues; determine root causes and track remediation.
• Coordinate with cross-functional IT and business teams to remediate findings and ensure service readiness for external audits.
• Support external audit engagements and readiness activities for compliance frameworks.

Qualifications

• 2-4 years of experience in cybersecurity or security compliance.
• Hands‑on experience with AWS, Azure, and GCP environments.
• Knowledge of compliance frameworks such as SOC 2, PCI, ISO 27001, HITRUST, and HIPAA.
• Familiarity with core IT processes/services such as SDLC, Identity/User Access Management, Backup and Disaster Recovery.
• Bachelor’s or Master’s degree in Information Technology, Computer Science, or a related field.
• Ability to communicate effectively with both business and technical IT stakeholders.

Preferred Qualifications

• Security‑related experience in cloud environments.
• GRC engineering experience developing automated control testing solutions.
• Strong organizational and planning skills; proven team‑player.

Compensation

• Pay Rate: $55-60/hr W2 plus benefit and 401k options