Remote Jobs

ITGC Compliance Specialist - Internal Controls Management

5 days ago

PayCompetitive
LocationRemote
Employment typeFull-Time
  • Job Description

      Req#: 42852
      Posi t ion: ITGC Compliance Specialist - Internal Controls Management

      Loca t ion: Remote

      Posi t ion T ype: Contract/Fulltime

      Experience
      • experience in IT compliance, ITGC testing, IT audit, GRC operations, or risk and controls.
      • Demonstrated experience executing control testing procedures and documenting audit-ready evidence.
      • Exposure to SOX ITGC requirements or experience supporting organizations in public-company or IPO-readiness environments.
      • Working familiarity with the NIST Cybersecurity Framework (CSF 2.0), including the six core functions and subcategory structure.

      Technical & Framework Knowledge
      • Foundational understanding of COSO, SOX, and PCAOB audit expectations, with awareness of IPE validation requirements.
      • Familiarity with NIST CSF 2.0 target profiles, implementation tiers, and the crosswalk to complementary frameworks (e.g., ISO 27001, CIS Controls).
      • Working knowledge of SaaS governance concepts and SOC report analysis, including CUECs and bridge letters.
      • Comfortable operating in DevOps and Agile environments, with basic understanding of CI/CD pipelines, version control (e.g., GitHub), and ticketing systems (e.g., Jira).
      • Exposure to identity providers (e.g., Okta, Azure AD) and cloud platforms (e.g., AWS, GCP) is a plus.

      Soft Skills
      • Professional assertiveness: Comfortable raising control concerns and holding firm on compliance expectations in a constructive manner.
      • Clear communicator: Able to explain control requirements to technical teams and articulate technical architectures to auditors with equal confidence.
      • Pragmatic and solutions-oriented: Focuses on workable outcomes and sustainable fixes rather than theoretical perfection.
      • Detail-oriented: Produces thorough, well-organized documentation and evidence packages that meet audit-grade standards.


      Preferred Qualifications
      • Experience with GRC platforms such as AuditBoard, Drata, OneTrust, ServiceNow GRC, or similar.
      • Experience supporting multiple compliance frameworks simultaneously (e.g., SOC 2, ISO 27001, PCI DSS).
      • Familiarity with vulnerability management programs and remediation tracking.
      • Experience with TPRM processes and vendor risk assessment workflows.


      Preferred Certifications
      • CISA (Certified Information Systems Auditor) - Strongly preferred
      • CompTIA Security+ or CySA+
      • CRISC, CCSK, or similar GRC/security certifications are a plus

      NIST CSF or similar framework-specific training or credentials are valued
  • About the company

      The best remote jobs for you

Notice

Talentify is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

Talentify provides reasonable accommodations to qualified applicants with disabilities, including disabled veterans. Request assistance at accessibility@talentify.io or 407-000-0000.

Federal law requires every new hire to complete Form I-9 and present proof of identity and U.S. work eligibility.

An Automated Employment Decision Tool (AEDT) will score your job-related skills and responses. Bias-audit & data-use details: www.talentify.io/bias-audit-report. NYC applicants may request an alternative process or accommodation at aedt@talentify.io or 407-000-0000.