GRC Compliance Auditor
Core
Owns day-to-day execution of SOC 2 Type II and ISO 27001 compliance programmes, including readiness assessments, control mapping, evidence collection, and external audit coordination.
Role type
GRC Compliance Auditor
Builds
Compliance posture reports, control health metrics, audit-readiness scorecards, and automated evidence collection integrations
Domain
Information Security / GRC / Cloud Infrastructure
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
SOC 2 Type II audit execution, ISO 27001 compliance administration, GRC platform administration, control gap analysis, regulatory requirement translation, vendor risk assessment, audit finding remediation tracking
Preferred skills
CISA, ISO 27001 Lead Auditor/Implementer, CISM, CISSP, CRISC
Technologies
Vanta, Drata, Hyperproof, AuditBoard, Entra ID, Okta
Responsibilities
Lead internal audit cycles for SOC 2 and ISO 27001; Coordinate external audits end-to-end; Conduct readiness assessments and gap analyses; Develop and maintain cross-framework control libraries; Administer GRC and compliance automation platforms; Drive adoption of automated evidence collection; Produce executive compliance reports; Manage remediation of audit findings and exceptions; Develop audit readiness training and playbooks; Respond to customer security questionnaires
Seniority
Mid-Senior, hands-on IC
