Audit & Compliance Specialist

About the role

The Audit & Compliance Specialist will lead security and compliance audits across assigned market departments, act as a security consultant for operational teams, and support information‑security best practices at local and regional sites.

Key responsibilities

• Deliver the security awareness program to all employees.
• Execute internal audits quarterly or as needed, ensuring adherence to ISO 27001, PCI DSS, SOC 2, HITRUST, ISO 27701, GECSP and other internal policies.
• Collect, review and upload audit evidence to the corporate portal.
• Serve as the point of contact for information‑security matters with operations.
• Assess and report security risk assessments for each line of business.
• Support internal and external audits, including client security audits, and provide corrective‑action follow‑up.
• Implement security controls to mitigate identified risks and manage policy signing processes.
• Monitor daily operational security requests and ensure compliance with GECSP and TISPS standards.

Required profile

Required skills

• Knowledge of ISO 27001
• PCI DSS familiarity
• SOC 2 (Type 1 & 2) understanding
• HITRUST framework experience
• ISO 27701 awareness
• GECSP policy compliance
• Security risk assessment methodology