Senior InfoSec Risk and Compliance Specialist

About the role

A senior position on a governance, risk and compliance team, guiding external audits and building continuous control monitoring while advancing automation and AI compliance across the business.

What you will do

• Lead external SOC2 audits, coordinating the auditor and internal teams and unifying evidence requests
• Design and grow a continuous control monitoring program that replaces periodic sample testing with automated assurance
• Apply AI within the compliance program to map regulations, analyze evidence and draft findings, checking output critically
• Assess how new rules and frameworks apply, find compliance gaps and help implement new controls
• Act as a second line of defense before audits, escalating and quantifying issues for leadership
• Brief business teams and executives, and mentor colleagues on control testing and automation

What they look for

• Five to seven or more years in IT audit or governance, risk and compliance
• Experience leading SOC2 audits and coordinating external auditors
• Skill in building continuous control monitoring and automated evidence gathering
• Familiarity with frameworks such as SOX, SOC2 and emerging AI rules like the EU AI Act and NIST AI RMF
• Ability to communicate tactical and strategic updates to executives
• A strategic, innovative mindset and willingness to work across the full breadth of governance, risk and compliance