Security Audit & Controls, Security GRC

About the Role

As part of the Security Audit & Controls team, you will own the Common Control Framework (CCF) across every control domain. This involves managing controls, ensuring they are accurate, tested, and trusted by auditors and engineers.

Key Responsibilities

• Own the Common Control Framework, including its mappings to various frameworks and commitments.
• Draft and validate control descriptions and activities with control owners.
• Design and run continuous monitoring of control efficacy.
• Verify remediation and carry it into steady state.
• Map new frameworks and commitments onto the CCF.
• Support the integrated audit and customer audits.
• Evaluate evidence reliability.
• Build with Claude: automate control mapping, evidence testing, and monitoring.

Minimum Qualifications

• Several years in IT audit, security compliance, or controls assurance.
• Working command of audit mechanics.
• Experience writing control descriptions and test procedures.
• Experience with continuous controls monitoring or automated evidence collection.
• Technical fluency to read and judge runbooks, configurations, or pipeline definitions.
• Clear writing skills.
• Ability to get control owners and partner teams to prioritize and close work.

Preferred Qualifications

• Experience designing or rebuilding a common controls framework.
• Experience with continuous controls monitoring or automated evidence programs.
• Experience applying LLMs to assurance work.
• Experience defining or assessing controls for AI systems.

Logistics

• Education requirements: Bachelor's degree in a related field or equivalent experience.
• Location-based hybrid policy: 25% office time.
• Visa sponsorship: Available.

The annual compensation range for this role is $270,000-$345,000 USD.