SOC 2 & CMMC Internal Auditor Liaison

March 15

Apply Now

Receive Emails with Similar Jobs

VICTORY

WebsiteLinkedInAll Job Openings

Marketing Technology • Systems Integration • Hypernetics • Artificial Intelligence • CTO

51 - 200

Description

• Perform complex, senior-level auditing and advisory work • Manage development of appropriate audit scope • Continuously collect operational documentation and data samples • Maintain relationships with external auditors • Educate organization about audit requirements, risk analysis and controls • Identify and document corrective actions • Respond to client requests • Understand and follow changes to CUECs • Have advanced writing and communication skills • Be willing to apply skills across a small organization • Help maintain the culture and values of the organization • Some experience with DOD cybersecurity requirements and contracts • Some experience with FedRAMP requirements

Requirements

• Experience with generally accepted auditing standards and risk-based internal auditing • Experience with basic information technology controls in a cloud environment • Ability to analyze, interpret, and summarize data, policies, and procedures • Ability to establish and maintain trust-based relationships with internal and external stakeholders

Benefits

• Opportunity to work with engineers, support representatives, and external auditors • Develop new audit program and processes for SOC2 and Department of Defense (DOD) Cybersecurity Maturity Model Certification (CMMC) / FedRAMP • Conduct research, benchmarking, examining and reviewing records & financial statements • Perform data & risk analyses, identify appropriate controls, assess business processes, and evaluate management processes • Manage audit scope, selection of external auditor, and successful completion of audits annually • Collect operational documentation and data samples to close process gaps or document accepted risk • Maintain relationships with external auditors • Educate organization about audit requirements, risk analysis and controls, and assist with integrating best practices • Identify and document corrective actions based on audit reports • Respond to client requests for documentation of processes and audit reports • Understand and follow changes to CUECs from partners and vendors