
51 - 200 employees
🔒 Cybersecurity
🤝 B2B
Cybersecurity • B2B
Arancia is a company whose website promotes a product called “DarkSense” and invites visitors to request a demo. The available site content focuses on consent management, lead capture (demo request form), marketing opt-ins, and UI/UX components (modal forms, cookie/privacy controls). From the provided material Arancia appears to be a vendor offering a software/security product and targets business users (forms ask for job title and company).
🔥 22 minutes ago
Where this job comes from
Posted on Arancia's careers page, not through a job board
First seen by Remote Rocketship 22 minutes ago

51 - 200 employees
🔒 Cybersecurity
🤝 B2B
Cybersecurity • B2B
Arancia is a company whose website promotes a product called “DarkSense” and invites visitors to request a demo. The available site content focuses on consent management, lead capture (demo request form), marketing opt-ins, and UI/UX components (modal forms, cookie/privacy controls). From the provided material Arancia appears to be a vendor offering a software/security product and targets business users (forms ask for job title and company).
• Lead internal audits, gap assessments, and readiness assessments against industry standards and regulatory frameworks, including SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, HITRUST CSF, FedRAMP, and NIST frameworks • Assess clients' current compliance posture by reviewing policies, procedures, control design, implementation, and supporting evidence • Lead client interviews, process walkthroughs, control testing, and evidence-review sessions • Map controls across multiple frameworks to reduce duplicate effort and provide a unified view of compliance • Apply risk management frameworks to identify, rate, and prioritize compliance and security risks • Help clients build or mature risk registers, risk treatment plans, and risk acceptance processes • Communicate risk to technical teams and executive leadership • Help clients define strategic compliance goals, target scope, timelines, and certification or attestation milestones • Develop prioritized remediation roadmaps linking gaps to risks, owners, effort, and target dates • Guide clients through policy and procedure development, control implementation, and evidence collection • Validate remediation and confirm controls are operating as intended before external audits • Prepare clients for external audits and certifications through scoping, evidence packages, and mock or pre-assessment walkthroughs • Support clients during external audits by coordinating evidence requests and responding to auditor questions • Help clients interpret and respond to external audit findings and regulatory requirements • Prepare audit documentation, gap reports, findings, risk ratings, and recommendations • Manage multiple concurrent engagements, delivering high-quality work on time and within scope • Advise clients on strengthening internal controls, governance, risk management, and compliance programs
• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Accounting, or a related field • 3–5 years of experience in IT audit, internal audit, security compliance, or cybersecurity consulting • Hands-on experience conducting internal audits, gap assessments, or readiness assessments against at least two of: SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, HITRUST CSF, FedRAMP, or NIST frameworks • Working knowledge of regulatory and external audit processes, and of what auditors and assessors expect in evidence and documentation • Strong understanding of risk management frameworks and methodologies, such as NIST RMF, NIST SP 800-30, ISO/IEC 27005, or ISO 31000 • Experience translating findings into remediation plans and compliance roadmaps for clients • Excellent written and verbal communication skills, with the ability to engage confidently with clients from technical staff to executives • Strong analytical and organizational skills, with the ability to manage competing priorities independently
• Full-time contractor employment • Remote work from the Philippines • Market-competitive compensation based on experience, qualifications, and expertise
Apply NowImprove your chances of getting an interview by checking your resume score before you apply.
🕒 October 17
Reports and operations auditor verifying departmental reports, workloads, and Odoo records for a US-based custom-manufacturing company. Documenting discrepancies and tracking corrective actions.
🕒 October 1
Internal Auditor testing financial, operational, SOX, and real estate controls. Planning risk-based audits, reporting findings, and tracking remediation for a distributed company.
🕒 September 14
US Auditor conducting financial statement audits for Asiacruit’s US-based clients. Testing controls, identifying risks, and preparing accurate audit documentation.
🕒 September 3
Senior Auditor delivering SME-FRS audits, tax filings, and financial statements for Sleek’s Hong Kong clients. Remote role with flexible working and AI-enabled back-office services.
🕒 July 1
IT Audit Senior Associate responsible for leading the SOX program. Collaborating with global teams and providing guidance on IT controls and audit processes.