Lead Audit and Compliance Specialist

Aptean is seeking a highly motivated and experienced Lead Audit and Compliance Specialist to join our growing team. As a Subject Matter Expert (SME), you'll play a key role in maintaining our robust compliance posture with industry standards like SOC 2 and ISO 27001 , focusing specifically on cloud infrastructure from a Governance, Risk, and Compliance (GRC) perspective.

Principal Duties and Responsibilities

• Conduct internal audits of security controls and processes related to SOC 2 and ISO 27001 compliance.
• Assist with the development, implementation, and maintenance of security policies and procedures.
• Analyze and evaluate the effectiveness of existing security controls and identify areas for improvement.
• Participate in the design and execution of penetration testing and vulnerability assessments.
• Work collaboratively with various teams (Security, IT Operations, Cloud Engineering) to remediate identified security risks and control gaps.
• Maintain and update GRC documentation related to security controls and compliance requirements.
• Stay up-to-date on industry best practices and regulatory changes related to cloud security and compliance.
• Assist with the preparation and execution of SOC 2 and ISO 27001 audits.
• Support the development and implementation of a cloud security GRC program.

Qualifications

Knowledge, Skills and Abilities

Skills Required

Internal Audit, Iso 27001, Cloud Security, Interpersonal Skills