Internal Auditor

Accountabilities:

• • Review, assess, and validate documentation and control evidence within GRC platforms such as Vanta or comparable solutions to confirm alignment with applicable compliance requirements.
  • Conduct internal audits, compliance reviews, and readiness assessments across frameworks including ISO 27001, ISO 42001, HIPAA, and GDPR.
  • Identify control gaps, documentation weaknesses, and compliance deficiencies through detailed evidence analysis and testing.
  • Develop practical remediation recommendations and structured action plans to address identified control and compliance gaps.
  • Coordinate multiple audit and compliance initiatives simultaneously, managing timelines, deliverables, testing requirements, and stakeholder expectations.
  • Leverage automated evidence collection and continuous control monitoring capabilities to improve audit readiness and compliance efficiency.
  • Analyze technical evidence such as system logs, access controls, security documentation, and other audit artifacts to assess control design and operating effectiveness.
  • Translate regulatory and framework requirements into practical, technical security and compliance controls.
  • Communicate audit findings, timelines, requirements, and compliance outcomes clearly to internal teams and stakeholders.
  • Collaborate with engineering, customer success, GRC, and leadership teams to resolve issues and strengthen overall security and compliance programs.
  • Support the development of rigorous, evidence-based audit programs and maintain accurate audit and compliance documentation.
  • Provide independent and objective assurance while maintaining a risk-based approach to audit planning and execution.
  • Contribute to continuous improvement of internal audit processes, compliance methodologies, and GRC automation practices.

  Requirements:

  • 2–5 years of hands-on experience in internal auditing, information security compliance, Governance, Risk, and Compliance (GRC), or a related field.
  • Strong practical knowledge of international security, privacy, and compliance frameworks, particularly ISO 27001, ISO 42001, HIPAA, and GDPR.
  • Demonstrated ability to translate regulatory requirements and framework clauses into practical security controls and audit procedures.
  • Experience with GRC platforms and automated compliance processes, including evidence collection, continuous control monitoring, and audit-readiness activities; Vanta or equivalent platforms are highly valued.
  • Strong understanding of information security fundamentals, IT risk management, technical access controls, security evidence, and relevant cybersecurity practices.
  • Experience reviewing system logs, technical documentation, control evidence, and other artifacts to evaluate control effectiveness.
  • Strong analytical and critical-thinking skills, with the ability to identify subtle control deficiencies and develop effective remediation plans.
  • Proven ability to manage multiple audits, compliance initiatives, and deadlines in a fast-moving environment.
  • Experience working in B2B SaaS, cloud-based environments, or technology-driven organizations is preferred.
  • Excellent written and verbal English communication skills, with the ability to communicate confidently with technical and business stakeholders across global teams.
  • Strong project management, organization, prioritization, and stakeholder-management skills.
  • Ability to work independently, take ownership, challenge the status quo, and operate effectively in a remote environment.
  • CPA, CIA, CISA, ISO Lead Auditor, or another relevant professional certification is preferred, or demonstrated willingness to pursue an applicable credential.
  • A reliable high-speed internet connection and a professional home-office setup suitable for confidential conversations and uninterrupted remote collaboration.
  • Availability to work approximately 8:00 AM–5:00 PM U.S. Eastern Time (ET).
  • Willingness to travel locally for occasional onsite meetings, team gatherings, or business activities as required.
  • Successful completion of applicable identity verification and background screening requirements, where legally permitted.

  Benefits:

  • Fully remote-first working environment with flexibility to work from India.
  • Competitive base salary with performance reviews and potential merit-based bonus opportunities.
  • Clear career development opportunities supported by mentorship and training.
  • Reimbursement for approved role-related training and professional certification courses.
  • Opportunities for advancement within a growing, early-stage organization.
  • Exposure to international cybersecurity, privacy, governance, and compliance frameworks.
  • Opportunity to work with modern GRC automation and continuous compliance technologies.
  • Collaboration with a global, cross-functional team.
  • Inclusive workplace committed to equal employment opportunities and professional growth.
  • Flexible environment designed to support effective remote work and work-life balance.