Internal Auditor

Internal Auditor

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Internal Auditor based in India.

This is a remote opportunity for an Internal Auditor supporting organizations in strengthening their information security, governance, and compliance programs. You will conduct risk-based audits and assess the effectiveness of controls against leading international frameworks. The role combines detailed evidence review, control validation, gap analysis, remediation planning, and audit readiness. You will work across frameworks including ISO 27001, ISO 42001, HIPAA, GDPR, and other relevant security and privacy standards. You will collaborate with technical teams, customer success professionals, GRC specialists, and business leaders in a fast-paced global environment. The position offers meaningful ownership, exposure to modern GRC automation platforms, and opportunities to influence clients' cybersecurity maturity. It is well suited to an analytical, organized compliance professional who enjoys translating complex requirements into practical security controls.

Accountabilities:

• Review, assess, and validate documentation and control evidence within GRC platforms such as Vanta or comparable solutions to confirm alignment with applicable compliance requirements.
• Conduct internal audits, compliance reviews, and readiness assessments across frameworks including ISO 27001, ISO 42001, HIPAA, and GDPR.
• Identify control gaps, documentation weaknesses, and compliance deficiencies through detailed evidence analysis and testing.
• Develop practical remediation recommendations and structured action plans to address identified control and compliance gaps.
• Coordinate multiple audit and compliance initiatives simultaneously, managing timelines, deliverables, testing requirements, and stakeholder expectations.
• Leverage automated evidence collection and continuous control monitoring capabilities to improve audit readiness and compliance efficiency.
• Analyze technical evidence such as system logs, access controls, security documentation, and other audit artifacts to assess control design and operating effectiveness.
• Translate regulatory and framework requirements into practical, technical security and compliance controls.
• Communicate audit findings, timelines, requirements, and compliance outcomes clearly to internal teams and stakeholders.
• Collaborate with engineering, customer success, GRC, and leadership teams to resolve issues and strengthen overall security and compliance programs.
• Support the development of rigorous, evidence-based audit programs and maintain accurate audit and compliance documentation.
• Provide independent and objective assurance while maintaining a risk-based approach to audit planning and execution.
• Contribute to continuous improvement of internal audit processes, compliance methodologies, and GRC automation practices.

Requirements:

• 2–5 years of hands-on experience in internal auditing, information security compliance, Governance, Risk, and Compliance (GRC), or a related field.
• Strong practical knowledge of international security, privacy, and compliance frameworks, particularly ISO 27001, ISO 42001, HIPAA, and GDPR.
• Demonstrated ability to translate regulatory requirements and framework clauses into practical security controls and audit procedures.
• Experience with GRC platforms and automated compliance processes, including evidence collection, continuous control monitoring, and audit-readiness activities; Vanta or equivalent platforms are highly valued.
• Strong understanding of information security fundamentals, IT risk management, technical access controls, security evidence, and relevant cybersecurity practices.
• Experience reviewing system logs, technical documentation, control evidence, and other artifacts to evaluate control effectiveness.
• Strong analytical and critical-thinking skills, with the ability to identify subtle control deficiencies and develop effective remediation plans.
• Proven ability to manage multiple audits, compliance initiatives, and deadlines in a fast-moving environment.
• Experience working in B2B SaaS, cloud-based environments, or technology-driven organizations is preferred.
• Excellent written and verbal English communication skills, with the ability to communicate confidently with technical and business stakeholders across global teams.
• Strong project management, organization, prioritization, and stakeholder-management skills.
• Ability to work independently, take ownership, challenge the status quo, and operate effectively in a remote environment.
• CPA, CIA, CISA, ISO Lead Auditor, or another relevant professional certification is preferred, or demonstrated willingness to pursue an applicable credential.
• A reliable high-speed internet connection and a professional home-office setup suitable for confidential conversations and uninterrupted remote collaboration.
• Availability to work approximately 8:00 AM–5:00 PM U.S. Eastern Time (ET).
• Willingness to travel locally for occasional onsite meetings, team gatherings, or business activities as required.
• Successful completion of applicable identity verification and background screening requirements, where legally permitted.

Benefits:

• Fully remote-first working environment with flexibility to work from India.
• Competitive base salary with performance reviews and potential merit-based bonus opportunities.
• Clear career development opportunities supported by mentorship and training.
• Reimbursement for approved role-related training and professional certification courses.
• Opportunities for advancement within a growing, early-stage organization.
• Exposure to international cybersecurity, privacy, governance, and compliance frameworks.
• Opportunity to work with modern GRC automation and continuous compliance technologies.
• Collaboration with a global, cross-functional team.
• Inclusive workplace committed to equal employment opportunities and professional growth.
• Flexible environment designed to support effective remote work and work-life balance.