MeridianLink logo

Information Security Auditor 1698 - MeridianLink

View Company Profile
Job Title
Information Security Auditor 1698
Job Location
United States
Job Description
Position Summary:
As an Information Security Auditor within the IS and Compliance team, you'll be responsible for safeguarding internal company data and client data through robust information security, compliance, and risk management programs. You'll manage the development, deployment, and execution of controls and defenses to ensure the security and compliance of our technology infrastructure and data assets. This role involves developing and executing security controls, defenses, and countermeasures to prevent attacks on email, data, e-commerce, and web-based systems, as well as administering policies to control access to systems.

Expected Duties:
-Audit Participation: Facilitate audit testing for SOC 2, PCI DSS, and SOX compliance, develop and monitor controls, and assist with remediation guidance.
-Cloud & Systems Audits: Lead audits of cloud environments, information systems, and security tools to ensure adherence to frameworks, laws, and regulations.
-Security Assessments: Support comprehensive assessments of security controls to determine their effectiveness and ensure they meet security requirements.
-Stakeholder Guidance: Guide stakeholders on securing systems and liaise with auditors and compliance teams to implement compensating controls.
-Research & Best Practices: Research best practices and trends in information security, ensure execution of required testing, and lead remediation activities for successful security audits/certifications.
-Identify Weaknesses: Identify weaknesses in internal controls, provide guidance on improving security compliance processes, and partner with stakeholders to implement solutions.
-Policy Alignment: Ensure alignment with internal policies and external regulatory requirements, continuously identify process enhancements, and stay current on changing regulatory requirements and industry frameworks.

Qualifications: Knowledge, Skills, and Abilities
-Education & Experience: Bachelor's degree with 4-6 years of related experience or equivalent work experience.
-Audit Expertise: 3+ years of experience in external/internal audit roles managing and leading AICPA SOC 2, PCI DSS, and SOX audits.
-Framework Knowledge: Knowledge of industry frameworks and standards such as ISO/IEC 27001:2013, PCI DSS, NIST CSF, and NIST 800-53.
-Security Controls: Experience implementing and/or assessing IT security controls to meet security, compliance, and audit requirements.
-Certifications: Possess or be working towards professional security certifications such as CISA, CISSP, CRISC, CCSP, CISM, GIAC, QSA, or similar.
-Consensus Building: Expertise in building consensus across business partners and technology leaders, and influencing successful outcomes.
-Project Management: Strong project management and communication skills, including the ability to gather relevant data, work in a team environment, and manage conflict.
-Cloud Assessments: Experience assessing controls within multi-cloud environments and effectively communicating results to stakeholders.
-Control Documentation: Assist with documenting control objectives and procedures in areas such as cybersecurity, cloud security, governance and compliance, DevSecOps, data security and protection, incident response, enterprise security architecture, and technology risk management.
-Problem-Solving Skills: Strong business and technical aptitude and problem-solving skills.
-Continuous Learning: Enthusiasm to learn through structured, on-the-job, and self-directed training.
-Communication Skills: Ability to communicate security-related concepts to a broad range of technical and non-technical staff.

This role offers an exciting opportunity to ensure the security and compliance of our technology infrastructure and data assets. If you're passionate about information security and risk management, we'd love to hear from you!

Everything You Need, One Platform.

From job listings to startups, investors to funding rounds, and everything in between, Employbl puts the power in your hands. Why wait?

Start your free trial today!


Stay Ahead of the Curve

Sign up for our newsletter to stay informed about the latest startups and trends in the tech market. Let Employbl be your guide to success.

MeridianLink Headquarters Location

Costa Mesa, CA

View on map

MeridianLink Company Size

Between 500 - 1,000 employees

MeridianLink Founded Year

1998

MeridianLink Total Amount Raised

$570,499,968

MeridianLink Funding Rounds

View funding details
  • Post Ipo Secondary

    $85,500,000 USD

  • Post Ipo Debt

    $485,000,000 USD

  • IPO

    $0