Information Systems Auditor

The GRC Information Systems Auditor supports and leads compliance assessments, control testing, continuous monitoring, regulatory compliance activities, and audit readiness. This role evaluates the design and operating effectiveness of controls, identifies gaps, coordinates remediation, and helps ensure that compliance obligations are translated into sustainable operational practices.

• Lead audit activities for SOC 2, ISO 27001 and other compliance frameworks as required by business including planning, control mapping, evidence coordination, walkthroughs, testing support, request management, issue tracking, and remediation follow-up.
• Support PCI compliance activities, including requirements mapping, evidence collection, control validation, assessment coordination, and tracking of corrective actions.
• Perform continuous monitoring of control activities, compliance obligations, risk indicators, audit evidence, exceptions, and remediation plans.