Description

Manage regulatory compliance assessments and security control implementations across on-premise and cloud environments.

Responsibilities

• Conduct gap and regulatory compliance assessments against SOX, PCI, SOC1/SOC2, NIST, and ISO standards.
• Document business processes, flowcharts, and key controls with process owners.
• Partner with application teams to manage SOX onboarding, baseline audits, and dataflow architecture reviews.
• Develop audit reports on implementation status and follow up on remediation recommendations.
• Implement procedures to ensure company-wide adherence to SOX, PCI, and ISO 27001 programs.

Required Skills

• 3 to 6 years of experience conducting compliance assessments across organizational assets.
• Minimum 3 years of experience in SOX onboarding and compliance assessments.
• Minimum 3 years of experience in PCI standards assessment.
• Deep understanding of SOX, PCI, SOC1, SOC2, NIST RMF/CSF, ISO 27001, and ISO 27005.
• Knowledge of Complementary User Entity Controls (CUECs) and cloud-applicable controls.
• Ability to identify and document process narratives and related flowcharts.
• Proficiency in testing procedures and test cases for SOC1 and SOC2.
• Bachelor degree in Accounting, Finance, Engineering, or a related field.
• At least one certification: CISA, CISM, ISO 27001 Lead Auditor, or Google Cloud Security Professional (GCP).

Preferred Skills

• Cloud experience specifically related to SOX compliance.
• Experience in remediation of findings and defect management.

Key Skills

Education

Any Graduate