Security Compliance, Audit & Technical Architecture Manager

Responsibilities: Lead and execute control testing cycles for ITGCs, application, and regulatory controls across SOX, SOC 1/2, ISO 27001, NIST CSF, CMMC, GDPR, CCPA, HIPAA, and others Manage audit readiness programs, assess gaps, define remediation roadmaps, build evidence libraries, and prepare clients for audits Deliver technical architecture assessments spanning cloud and enterprise applications, data platforms, and hybrid infrastructure Own IAM compliance activities, including RBAC, PAM, MFA, access certification, and joiner/mover/leaver processes Support GRC program delivery, policy development, risk assessments, control mapping, evidence collection, and TPRM for Tier 1 vendors Translate regulatory requirements into actionable technical controls and architecture recommendations for client teams Produce audit workpapers, findings, gap analyses, and management presentations Mentor junior analysts and consultants; contribute to proposals and client relationships

Key requirements: Total cybersecurity/IT audit/GRC experience: ≥8 years, with ≥5 years in controls testing and audit readiness ≥5 years hands-on testing ITGCs, application controls, and regulatory controls across multiple frameworks (SOX, SOC 2, ISO 27001, NIST CSF, CMMC, HIPAA, GDPR, etc.) ≥5 years of technical architecture experience across cloud platforms (AWS, Azure, GCP), enterprise applications, data governance, and identity/access management ≥5 years of experience with evidence management, audit artifact preparation, and walkthrough facilitation with auditors Bachelor’s degree or equivalent work experience (minimum 12 years); Associate’s degree requires ≥6 years of work experience creative analytical problem solving strong documentation ITGCs, application controls, regulatory controls testing SOX, SOC 1/2, ISO 27001, NIST CSF, CMMC, GDPR, HIPAA, GDPR cloud infrastructure (AWS, Azure, or GCP)