Senior Information Security Auditor

To enhance compliance efforts, the full-time Senior Information Security Internal Auditor will develop and maintain the information security internal audit program, align it with regulatory requirements, and serve as a technical point of contact during audits in a fully remote capacity. Key responsibilities Develop and maintain the information security internal audit program in alignment with FedRAMP, CMMC, and other applicable requirements Translate framework requirements into clear technical controls for engineering teams and oversee monthly continuous monitoring assessments Coordinate with Engineering and Operations to deliver compliance documentation on time and represent Compliance in certification projects Required qualifications At least three years of experience in security, assessments, or compliance consulting in a technical environment Experience with major compliance frameworks such as CMMC, FedRAMP, or ISO 27001 Background in cloud security, platform engineering, or DevSecOps Familiarity with Infrastructure as Code tools like Terraform and integrating security into CI/CD pipelines Possession of relevant certifications such as CISSP, CISA, or CCSP is a plus