Senior Audit Program Manager Security Assurance
Posted Updated
Description
You will lead SOC 2 and ISO 27001 engagements from readiness through reporting. You will manage auditors, plans, evidence, controls, findings, scope changes, remediation, and reusable assurance workflows across cloud, data-centre, and corporate environments.
Responsibilities
- Lead SOC 2 and ISO 27001 audit and certification engagements
- Establish audit plans, evidence requirements, milestones, and dependencies
- Serve as the primary contact for external auditors
- Manage audit requests, schedules, owners, deadlines, and status reviews
- Prepare and review audit documentation and final deliverables
- Assess control design and operating effectiveness
- Review and validate technical evidence
- Investigate control and evidence discrepancies
- Assess scope expansion and shared control responsibilities
- Create and verify remediation plans
- Improve evidence collection, control mappings, and Drata workflows
- Use AI tools to streamline assurance work
Requirements
- 7+ years of experience in security assurance, technology audit, compliance, or related disciplines
- Experience independently leading external audit or certification engagements
- Hands-on experience with SOC 2 and ISO 27001
- Experience working with external auditors and managing findings through verified closure
- Technical fluency in cloud infrastructure and security controls
- Experience defining assessment scope and shared responsibilities
- Program-management experience across concurrent engagements
- Strong written communication
Benefits
- Bonus eligibility
- Equity eligibility
- Medical insurance
- Dental insurance
- Vision insurance
- Flexible paid time off
- Parental leave
- Retirement plan participation
- Flexible workplace
