Senior Information Security Internal Auditor

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $118.7k - $150k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Everbridge

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2002

🏥 Healthcare

📦 Logistics

💼 Consulting

Healthcare • Logistics • Consulting

Everbridge is a company specializing in critical event management solutions designed to enable organizations to plan, anticipate, mitigate, respond to, and recover from unexpected events. With a broad suite of products including risk intelligence, mass notification, crisis management, and public warning systems, Everbridge is committed to maximizing organizational resilience through their integrated Everbridge 360™ platform. Serving industries such as financial services, healthcare, technology, telecommunications, energy, and government sectors, Everbridge helps over 6,500 global customers manage critical events more effectively. Their solutions ensure workforce safety, protect assets, and maintain business continuity during disruptions, ensuring swift communication and effective management of crises.

📋 Description

• Develop and maintain the information security internal audit program within the Compliance portfolio, aligning it with FedRAMP, CMMC and other applicable requirements. • Maintain Everbridge’s Information Security and Privacy Framework, including its policies, procedures, standards and guidelines. • Translate framework requirements into clear, testable technical controls and acceptance criteria that engineering teams can implement. • Partner with Engineering, DevOps and Security to integrate effective controls into existing workflows. • Own monthly continuous monitoring (ConMon) assessments and submissions. • Coordinate with Engineering and Operations to deliver CMMC and FedRAMP documentation on time and meet project milestones. • Serve as a technical point of contact during audits; explain architecture, data flows and control evidence and help auditors understand cloud-environment requirements. • Represent Compliance in FedRAMP, CMMC and other certification projects and strategy discussions. • Build and maintain automated evidence collection across cloud platforms, identity providers, CI/CD pipelines and ticketing systems. • Develop policy-as-code and continuous control monitoring checks using tools such as OPA, Cloud Custodian or AWS Config. • Own and improve the GRC platform and its integrations. • Create audit plans and reports, maintain organized documentation and evidence, and establish clear processes and guidelines. • Develop approaches for continuous monitoring and recertification, support external audits and assist with other audit activities as needed.

🎯 Requirements

• At least three years of experience in security, assessments, compliance consulting or advisory work in a highly technical environment. • At least three years of experience performing or supporting technical assessments for a major compliance effort, such as CMMC, FedRAMP, SOC 2, BSI C5 or ISO 27001. • Experience with CMMC, DFARS, NIST SP 800-171, FedRAMP, NIST SP 800-53, FISMA or similar governance and compliance frameworks. • Experience in cloud security, platform engineering or DevSecOps. • Experience with Infrastructure as Code, such as Terraform, and integrating security tools into CI/CD pipelines. • Strong understanding of information collection, reporting and documentation processes, including developing status reports, metrics and measures. • Ability to explain technical risk to non-technical stakeholders and translate audit requirements for engineers, both verbally and in writing. • Clear communication, strong organization and interpersonal skills, and the ability to take initiative and influence decision-makers. • A CISSP, CIA, CISA, CySA+, CCSP or ISO 27001 Auditor certification is a plus. • Must be a U.S. citizen and able to obtain a Secret clearance.