Own the audit journey for a portfolio of global customers from gap assessment through external audit closure.
Identify security and compliance gaps, turning them into practical remediation plans with engineering and leadership teams.
Serve as the coordination point between customers and independent auditors, facilitating evidence requests and communication.
Sprinto is an autonomous trust platform that centralizes compliance and security requirements across frameworks, vendors, and customers. Backed by Accel and Elevation, with $31.8M in funding, Sprinto serves over 4,000 organizations and fosters a remote-first culture of ownership and impact.
Develops and maintains information security policies, procedures, and controls ensuring compliance with HITRUST, SOC 2, HIPAA, and other frameworks.
Leads audit readiness and execution, managing HITRUST and SOC 2 Type II examinations from planning through report issuance.
Drives continuous improvement of security processes, risk management, and incident response across the organization.
MRO specializes in information security assurance and regulatory compliance, helping organizations manage risk and maintain audit readiness. The company fosters a security-focused culture with a team of experienced professionals.
Prepare audit work papers and adjust trial balances.
Manage client confirmations and maintain Caseware templates.
Collaborate with clients and co-workers in a fast-paced environment.
Aprio is a top 20 CPA and advisory firm serving fast-growing industries with proven expertise and strategic foresight. With over 3,200 team members across 40+ U.S. and international offices, Aprio fosters a progressive culture and offers vast growth opportunities.
Guide customers through setup and go-live, ensuring they reach their first audit milestone.
Collaborate with founders, CTOs, and security teams to map goals to actionable milestones.
Own next steps when stuck, partnering with internal teams to keep the project moving.
Sprinto is an autonomous trust platform that centralizes compliance, audits, risk management, and more for organizations worldwide. Backed by top investors, it serves over 4,000 companies in 75+ countries and fosters a remote-first, ownership-driven culture.
Lead and mature Fullscript's security compliance program across SOC 2, PCI DSS, and HITRUST frameworks.
Manage internal and external audits, coordinate remediation efforts, and maintain continuous audit-readiness.
Partner cross-functionally with Security, Engineering, Privacy, Legal, and Product to translate compliance requirements into scalable practices.
Fullscript is a health technology company that powers every part of care by providing practitioners with clinical insights, lab interpretations, and high-quality supplements. With over 125,000 practitioners and 10 million patients, they foster a culture of curiosity, collaboration, and putting people first.
Perform client engagements from start to finish, including planning, executing, and completing financial audits while managing to budget.
Gain comprehensive understanding of client operations and business objectives, and utilize knowledge to resolve audit issues.
Supervise, train, and mentor associates and interns, and actively participate in planning and closing meetings.
BerryDunn is a professional services firm providing tax, advisory, and consulting services to businesses, nonprofits, and government agencies. The firm is recognized for its diverse and inclusive workplace culture and focus on learning and well-being.
Support planning and execution of operational and integrated audits across business and IT operations.
Conduct walkthroughs, evaluate controls, and perform testing across business processes and IT systems.
Utilize AI and data analytics to identify control gaps and deliver data-driven insights.
ServiceNow is the AI control tower for business reinvention, helping 85% of the Fortune 500 work smarter, faster, and better. They have a collaborative culture focused on innovation and AI-native thinking.
Own end-to-end audit evidence collection and validation across multiple compliance frameworks including FedRAMP, ISO 27001, and SOC 2.
Maintain and continuously verify technical controls across GCP, GitHub, and Microsoft 365 environments.
Serve as the primary liaison between GRC and technical teams to reduce audit burden and ensure continuous audit readiness.
A-LIGN is a leading provider of cybersecurity compliance programs, offering services including SOC 2, ISO 27001, HITRUST, FedRAMP, and PCI. They are the number one issuer of SOC 2 and HITRUST and a top three FedRAMP assessor, operating in a high-growth, PE-backed environment.
Perform cybersecurity and technology risk assessments across systems, vendors, and business processes.
Support compliance with SOC 2, HIPAA, HITRUST, and PCI DSS frameworks.
Manage third-party risk assessments and track remediation of security findings.
Jobgether is a platform that uses AI-powered matching to connect candidates with job opportunities. They partner with companies to manage applications and hiring processes, offering remote roles and streamlined recruitment.
Prepare and be part of internal and external audits of a cloud platform within a dedicated team of specialists.
Ensure compliance requirements for various IT audits and create and map requirements catalogs of different standards.
Act as a trusted advisor to cross-functional teams on information and IT security during audits of the platform.
Deutsche Telekom IT Solutions is a subsidiary of the Deutsche Telekom Group providing a wide portfolio of IT and telecommunications services. With more than 5,300 employees across four Hungarian sites, it has been recognized as Hungary's most attractive employer in 2025.
You will prepare and participate in internal/external audits of an Open cloud platform within a dedicated specialist team.
You will ensure compliance requirements for various IT audits and map requirements catalogs of different standards such as SOC1, SOC2, C5, and ISO.
You will act as a trusted advisor for cross-functional teams on information and IT security during audits, answer stakeholder questions, and escalate risks.
Deutsche Telekom IT Solutions Slovakia provides innovative information and communication technology services. The company has grown to more than 3,900 employees and is the second largest employer in eastern Slovakia.
Execute the clinical audit program, including scheduling, planning, reporting, and resolution of audits.
Ensure compliance with worldwide regulations, ICH-GCP, AbbVie policies, and sponsor requirements.
Provide advice and support on GCP and quality topics to business partners and support inspections.
AbbVie discovers and delivers innovative medicines and solutions across immunology, oncology, neuroscience, and aesthetics. It is a large biopharmaceutical company committed to integrity, innovation, and community service.
Assist with PCI DSS assessments, evidence review, and security control evaluations for clients across industries.
Support scoping, workpaper documentation, and remediation tracking for compliance engagements.
Collaborate with senior assessors to help clients improve security posture and achieve PCI DSS compliance.
Insight Assurance is a global audit firm transforming cybersecurity and compliance through SOC 2, ISO 27001, PCI DSS, HITRUST, CMMC, and FedRAMP. It has 170+ professionals serving nearly 2,000 clients, with a tech-enabled, inclusive culture.
Conduct clinical audits and risk assessments to identify compliance gaps.
Manage multiple client engagements and deliver accurate project results.
Build strong client relationships and present findings to leadership.
Kodiak Solutions transforms healthcare through technology-driven solutions, specializing in finance, unclaimed property, and risk management. Their innovative platform streamlines operations, allowing providers to focus on patient care.
Own internal audits end-to-end for customers, from kickoff to final report.
Review and sample evidence against ISO 27001 controls and communicate findings clearly.
Manage multiple audits simultaneously while keeping them on schedule and improving framework content.
Secfix automates security compliance for European companies (ISO 27001, GDPR, TISAX, SOC 2). The 100% remote team with hubs in Munich, Berlin, and London is high-performing and backed by top VCs after raising a $12M Series A.
Lead ISO 27001 and SOC 2 audit cycles end-to-end, owning compliance and audit.
Own customer trust by responding to security questionnaires and representing InfoSec to enterprise clients.
Drive risk management, vendor security, and incident response while building AI-assisted workflows.
We are the first AI-native Employee Experience Platform, helping organizations unlock inspirational communication. Our diverse team of 550+ employees supports over 1,500 customers, and we are a unicorn company valued at over $1 billion.
Gain exposure to client-facing security assessments by participating in control testing interviews and assisting with artifact gathering.
Contribute to advisory deliverables by analyzing security control artifacts against compliance standards and documenting results.
Achieve a comprehensive understanding of cybersecurity essentials with a focus on Governance, Risk, and Compliance (GRC) and security frameworks like FedRAMP, ISO, SOC, and HIPAA.
Coalfire is a cybersecurity professional services firm that helps clients solve their hardest cybersecurity challenges through advisory, assessment, and automation. With offices across the U.S. and U.K., the company is a team of passionate problem-solvers focused on growth and making a difference.
Lead and oversee audit engagements from planning through issuance, managing budgets, timelines, and staffing.
Serve as a primary client contact and trusted advisor, ensuring compliance with governmental accounting standards.
Supervise and mentor associates, providing coaching and performance feedback to develop team members.
MGO is a CPA and advisory firm that serves as trusted advisors to organizations strengthening communities and improving public services. With more than 500 professionals across the U.S. and India, MGO is recognized as a Best Place to Work and fosters a collaborative, people-first culture.
Maintain and enhance Anovia's ISO/IEC 27001 ISMS, including policies, controls, risks, and audit coordination.
Support SOC 2, HIPAA, and other compliance programs, including vendor assessments, vulnerability management, and incident response.
Lead ambiguous technical and operational initiatives from planning through implementation, coordinating stakeholders and driving completion.
Anovia is an industry-leading technology outsourcing support provider specializing in workflow and knowledge processes, technical support, helpdesk, and multilingual services. With over 200 experts globally, we serve Fortune 500 companies and value growth, learning, and work-life balance.
Lead end-to-end execution of IT audits including planning, fieldwork, documentation, and reporting, while managing co-source teams.
Assess IT general controls, application controls, and cybersecurity controls across ERP, cloud, and manufacturing environments.
Execute IT SOX control testing for external audit and serve as key contact for external auditors.
Stanley Black & Decker is a global tool company providing innovative solutions for industries and consumers. With approximately 43,500 diverse and high-performing professionals worldwide, they foster a culture of purpose, integrity, and continuous improvement.