Security Audit and Controls Security GRC

Skills

About the Role

You will own the common control framework across security domains and map it to relevant commitments. You will write and validate controls, run continuous monitoring, verify remediation, support audits, assess evidence reliability, and use Claude to automate control mapping, evidence testing, and monitoring.

Requirements

• Several years of experience in IT audit, security compliance, or controls assurance
• Experience owning a control framework or control library across multiple frameworks
• Knowledge of audit scoping, walkthroughs, sampling, control effectiveness, deficiency evaluation, and evidence reliability
• Experience writing control descriptions, activities, and test procedures
• Experience with continuous controls monitoring or automated evidence collection
• Technical fluency with runbooks, configurations, or pipeline definitions
• Clear writing
• Ability to influence control owners and partner teams

Responsibilities

• Own the Common Control Framework and its framework mappings
• Draft and validate control descriptions and activities
• Design and run continuous control-efficacy monitoring
• Verify remediation and maintain control and finding status
• Map new frameworks and commitments to the Common Control Framework
• Support integrated and customer audits
• Evaluate evidence reliability
• Automate control mapping, evidence testing, and monitoring with Claude

Benefits

• Visa sponsorship
• Optional equity donation matching
• Generous vacation
• Parental leave
• Flexible working hours