Job Description
• Coordinate and execute external audits and compliance assessments.
• Collect, validate, and manage audit evidence and supporting artifacts.
• Develop and maintain control narratives documenting how security controls operate.
• Prepare audit walkthrough materials and facilitate walkthrough sessions with auditors.
• Serve as the liaison between auditors and engineering/security teams.
• Track audit progress, remediation efforts, and provide weekly status reporting.
• Review audit findings and support final report reviews.
• Partner with stakeholders to prepare for certifications and readiness assessments.
• Identify and implement opportunities to automate evidence collection and compliance processes.
Create process documentation and compliance playbooks.
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.
Required Skills & Experience
• 5+ years of experience in Security Compliance, IT Audit, GRC, or Security Assurance.
• Hands-on experience supporting external audits beyond SOC 1/SOC 2.
• Strong knowledge of any of the below:
○ ISO 27001
○ ISO 27018
○ PCI DSS
○ HITRUST
• Experience creating control narratives, audit artifacts, and evidence repositories.
• Experience leading audit walkthroughs and working directly with external assessors.
• AWS and/or GCP knowledge is required.
• Strong communication skills with the ability to work across security, compliance, and engineering teams.
Experience managing multiple concurrent audits and assessment activities.
Nice to Have Skills & Experience
• SOX compliance experience.
• Experience with continuous compliance monitoring or audit automation tools.
• Experience in SaaS or cloud-based environments.
• Knowledge of multi-cloud security and compliance programs.
Previous experience supporting large-scale certification and regulatory initiatives.
Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.