Independent audit support for: SOX 404 ITGCs, PII, PCI, ISPS
Perform control health checks and remediation testing procedures to address issues identified via audit assessments, internal or external audits, and/or other assessments
Participate in audit walkthrough meetings to gain operational comfort in the design of the Company’s automated controls
Participate in Audit Readiness efforts to ensure proper system scoping and respective ITGCs, control validations and timely program onboarding
Perform impact analysis and risk assessment on deficiency findings and documentation associated with the assessment
Execute control finding investigation and record in internal SOCD/SAD
Provide requirements input to Development leads to identify and implement automation and efficiency opportunities to meet governance and compliance demands
Provide program status updates to management
Primary liaison between external/internal auditors and tech organization and ensure proper audit evidence is delivered to auditors
Work with management and internal audit on maintaining the master Risk and Control Matrix over the systems
Collaborate with engineers on designing controls in their environment

Minimum of 5+ years of IT SOX experience and proven experience in supporting IT audit/compliance functions
Thorough understanding of SOX ITGC, PCI and ICFR 404 standards and audit objectives
Interpersonal skills with the ability to work with teams cross-functionally
Strong verbal and written communication skills
Ability to effectively communicate to technical and non-technical audiences
Highly organized and efficient
Ability to navigate through ambiguity, manage and coordinate multiple project assignments simultaneously in a fast-paced, deadline-driven environment, accepting ownership and accountability of the process and deliver on commitments
Experience and knowledge of NIST framework, ISO 27001, K-ISMS, GDPR (preferred)
Experience working with companies that have a heavy microservice architecture (preferred)
Understanding of cloud technologies (preferred)

A bonus and/or long-term incentive units may be provided as part of the compensation package
Full range of medical, financial, and/or other benefits, dependent on the level and position offered

Senior Security Specialist, Compliance

Key skills