Information Security Compliance Specialist

HANDS-ON EXPERIENCE SUPPORTING SOC 1 AUDITS
STRONG KNOWLEDGE OF IT GENERAL CONTROLS (ITGCs)
EXPERIENCE WITH CONTROL DESIGN AND OPERATING EFFECTIVENESS TESTING
STRONG UNDERSTANDING OF AUDIT EVIDENCE, SAMPLING, DEFICIENCY EVALUATION, AND REMEDIATION TRACKING
EXPERIENCE WITH ACCESS MANAGEMENT, CHANGE MANAGEMENT, IT OPERATIONS, BACKUP, INCIDENT MANAGEMENT, AND THIRD-PARTY CONTROLS
KNOWLEDGE OF ISO/IEC 27001, NIST, ITIL, RISK MANAGEMENT, AND DATA PROTECTION
ABILITY TO DEVELOP CONTROL NARRATIVES, RISK & CONTROL MATRICES, TEST SCRIPTS, AND AUDIT DOCUMENTATION
STRONG STAKEHOLDER MANAGEMENT AND COMMUNICATION SKILLS

PREFERRED
CERTIFICATIONS SUCH AS CISA, CIA, CRISC, CISSP, OR ISO 27001 Lead Auditor/Implementer
EXPERIENCE WITH SAP ENVIRONMENTS, CLOUD PLATFORMS, ENTERPRISE INFRASTRUCTURE, OR OUTSOURCED SERVICE ORGANIZATIONS
FAMILIARITY WITH SOC 2, ISAE 3402, SSAE 18, AND ICFR
EXPERIENCE WITH GRC, AUDIT MANAGEMENT, TICKETING, OR EVIDENCE-MANAGEMENT TOOLS

Experience: 6+ years in IT Audit, Information Security Compliance, Technology Risk, Internal Controls, or related assurance functions
REMOTE
FREELANCE
PROJECT DURATION 9 MONTHS