Job Description
Position Title : IT Internal Auditor – Security Risk & Compliance
Company : Cvent
Experience Required : 3–6 years
Location : [Insert Location]
Overview
Cvent is a leading meetings, events, and hospitality technology provider with more than 4,800 employees and approximately 22,000 customers globally, including 53% of the Fortune 500. Since its founding in 1999, Cvent has revolutionized the event management space by delivering a comprehensive platform that empowers marketers and event professionals.
Our software solutions support hotels, venues, and destinations in growing their MICE and corporate travel business. At the heart of Cvent's innovation is its people—a diverse, entrepreneurial team empowered to act boldly and make an impact.
Role Summary
We are seeking a motivated professional to join our global Internal Audit team. This role is responsible for executing IT internal audits, conducting security risk assessments, and supporting governance, risk, and compliance (GRC) initiatives across our worldwide operations. The position will primarily focus on IT general and application controls testing (60–70%) , along with supporting security compliance audits (30–40%) .
Key Responsibilities
- Lead IT testing for internal control compliance programs, including planning, evaluating, and documenting IT general and application controls.
- Conduct walkthroughs with process and control owners to assess control design and operational effectiveness.
- Prepare clear and detailed audit workpapers to document testing procedures, findings, and recommendations.
- Investigate control deficiencies and collaborate with stakeholders to design and implement remediation plans.
- Support security compliance activities such as PCI DSS, SOC 1 / SOC 2, ISO 27001 : 2013, and SSAE 18 audits.
- Maintain and update compliance documentation, including policies, standard operating procedures, flowcharts, and narratives.
- Collaborate with internal teams (Internal Controls, InfoSec, and Internal Audit) across India and the United States to support a dynamic and evolving compliance landscape.
Qualifications
3–6 years of experience in IT auditing, security risk assessment, or governance, risk, and compliance.Familiarity with Sarbanes-Oxley (SOX), the COSO framework, and industry standards such as ISO 27001 : 2013, PCI DSS, and SOC reports.Strong analytical skills and the ability to work independently in a fast-paced environment.Excellent verbal and written communication skills.Effective stakeholder management with experience collaborating across functions and geographies.Proficient in tools such as Microsoft Office, Zoom, Slack, Box, and AuditBoard.Knowledge of Oracle EBS, AWS, and enterprise SaaS platforms like Salesforce, Workday, or Coupa is a plus.Actively pursuing or holding relevant certifications such as CA, CIA, CISSP, CISA, CISM, or CRISC.Skills Required
Hospitality, Risk Assessment, Information Security, Cisa, Cism