Information security auditor

Job Title: Information Security Auditor
Location: Onsite / Hybrid / Remote
Experience Required: 5 to 8 Years
Employment Type: Full-time
About the Role
We are seeking an experienced Information Security Auditor to evaluate, assess, and strengthen organizational security controls across multiple compliance frameworks including NIST, ISO 27001:2022, SOC 2, CMMC, and PCI DSS. The candidate will lead risk assessments, audit engagements, security governance reviews, and continuous compliance initiatives, ensuring robust security posture and regulatory adherence.
Key Responsibilities
- Plan, execute, and report information security audits across multiple standards and regulatory frameworks.
- Perform gap assessments, risk analysis, control testing, and compliance readiness reviews against:
- ISO/IEC 27001:2022
- NIST CSF / NIST 800-series
- SOC 2 Type I & II
- CMMC Levels
- PCI DSS
- Evaluate effectiveness of security controls, governance processes, p...