Audit & Assurance Specialist
Core
Design, monitor, and improve security and compliance controls across SOC 2, PCI DSS, ISO 27001, and HIPAA frameworks to strengthen Lumin's security posture and support external audits.
Role type
Senior GRC Audit & Assurance Specialist
Builds
Security control programs, audit readiness, and compliance dashboards for a fintech/SaaS company
Domain
Financial services / Fintech / SaaS / Information Security
Required skills
Security control design, GRC platform management (TrustCloud, OneTrust, Drata), external audit coordination, POA&M management, security questionnaire execution, AI/ML governance basics, regulatory framework knowledge (SOC 2, PCI DSS, ISO 27001, HIPAA), cross-functional collaboration
Preferred skills
CRISC, ISO 27001 Lead Implementer/Auditor, HIPAA assessment experience, internal audit program development, client-facing security consulting
Technologies
TrustCloud, OneTrust, Drata, GRC platforms
Responsibilities
Design and implement security controls, assess control effectiveness, manage external audit fieldwork, maintain compliance dashboards, execute internal audit plans, manage POA&M processes, complete security questionnaires, support AI assurance efforts
Seniority
Mid-Senior, hands-on IC
