Information Security Compliance Specialist

About the role

Emoticon is seeking an Information Security Compliance Specialist for a freelance project with a duration of 9 months.

Responsibilities

• Support SOC 1 audits and test control design and operating effectiveness.
• Develop control narratives, risk and control matrices, test scripts, and audit documentation.
• Evaluate audit evidence, sampling, deficiencies, and remediation tracking.

Requirements

• 6+ years in IT Audit, Information Security Compliance, Technology Risk, Internal Controls, or related assurance functions.
• Strong knowledge of IT general controls (ITGCs), including access management, change management, IT operations, backup, incident management, and third-party controls.
• Knowledge of ISO/IEC 27001, NIST, ITIL, risk management, and data protection.
• Strong stakeholder management and communication skills.
• Preferred certifications include CISA, CIA, CRISC, CISSP, or ISO 27001 Lead Auditor/Implementer.
• Experience with SAP environments, cloud platforms, enterprise infrastructure, or outsourced service organizations is preferred.
• Familiarity with SOC 2, ISAE 3402, SSAE 18, ICFR, and GRC, audit management, ticketing, or evidence-management tools is preferred.

Key facts

• Freelance project duration: 9 months.
• Requires 6+ years in IT Audit, Information Security Compliance, Technology Risk, Internal Controls, or related assurance functions.
• Hands-on experience supporting SOC 1 audits is required.