Audit & Assurance Specialist
New
L
Lumin DigitalDigital banking
Remote - United StatesFull-TimeMiddle
Salary105,000 - 125,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- Four (4) or more years of professional experience in information security, GRC, compliance, IT audit, or a related field required.
- Required Skills
- HIPAA
Requirements
- Have four or more years of professional experience in information security, GRC, compliance, IT audit, or a related field.
- Have experience designing, evaluating, and improving security controls within a GRC platform such as TrustCloud, OneTrust, or Drata.
- Have experience in regulated financial services, fintech, or a similarly regulated SaaS environment.
- Have hands-on experience managing or supporting external audits or assessments, including SOC 2 and/or PCI DSS.
- Have familiarity with SOC 2, PCI DSS, ISO 27001, HIPAA, NIST 800-53, and FFIEC IT Examination Handbook expectations.
- Understand control design, including preventive, detective, and corrective controls.
- Be able to assess control applicability and effectiveness in a SaaS environment, including cloud infrastructure, application security concepts, and shared responsibility models.
- Be able to coordinate multiple audit engagements, questionnaire requests, and monitoring workstreams while maintaining accuracy.
- Be able to design and improve security workflows in GRC platforms, including control configuration, evidence workflows, and test automation where applicable.
- Have working knowledge of AI/ML governance, including model risk, data lineage, prompt and output handling, and third-party AI services.
- A relevant bachelor’s degree is preferred; CISA, Security+, or equivalent certifications are preferred, with CRISC and ISO 27001 Lead Implementer/Auditor certifications noted as a plus.
- Experience with internal audit programs, security questionnaires, POA&M processes, and cross-functional coordination is preferred or required as specified in the posting.
Responsibilities
- Design, document, and implement security and compliance controls across applicable frameworks.
- Assess control design and operating effectiveness, escalate deficiencies, and drive improvements.
- Conduct control testing through evidence review, system inspection, policy analysis, stakeholder interviews, and configuration validation.
- Maintain dashboards and metrics on control coverage, maturity, and performance trends.
- Manage assigned POA&M activities, including issue intake, owner assignment, status tracking, follow-up, and verification of remediation closure.
- Coordinate external audit fieldwork, auditor requests, and evidence collection across internal teams.
- Execute internal audit plans, perform test procedures, and prepare working papers and draft reports.
- Complete client and prospect security questionnaires, RFPs, due diligence questionnaires, and vendor security assessments.
- Perform AI and machine-learning control testing, validate evidence for model risk and data lineage controls, and track findings through remediation.
- Monitor changes to regulations and industry frameworks and share recommendations.
View Full Description & ApplyYou'll be redirected to the employer's site
