Information Security Lead Auditor Jobs

At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their highest potential. Through our robust portfolio of progressive solutions, comprehensive range of certifications and industry-leading insights , we lead by example to amplify excellence within the organisations that we support. Due to continued growth, we are expanding our Lead Auditor team. With onsite practical experience and deep knowledge of industry processes, policies, and regulations, you'll help clients reach their full potential. While internal audit experience is helpful, it's not mandatory as we offer comprehensive training via our academy. Following your Global and Divisional inductions, you will embark on a 12-week training programme, including classroom and onsite learning with a Senior Lead Auditor to achieve your Lead Auditor qualifications within Quality Management Systems (9001) and Information Security Management Systems (27001). We’re particularly interested in candidates who bring experience beyond IT. Be sure to highlight any work experience since leaving education on your CV. Plan, conduct, and lead independent, third-party audits Gather objective evidence and prepare clear, impartial audit reports Host opening and closing meetings to communicate findings Build and maintain professional client relationships Continue developing your knowledge of the industry and evolving standards Complete auditor training and achieve your Lead Auditor qualifications (supported by ISOQAR) You’ll bring hands-on operational experience from a relevant industry or industries and understand how organisations operate day to day. Strong communication skills, analytical thinking and clear, accurate report writing are essential, alongside a professional and methodical approach. You’ll also be comfortable with regional and national travel (including occasional overnight stays) and hold a full UK driving licence. Your integrity, technical knowledge, and ability to delive

At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their highest potential. Through our robust portfolio of progressive solutions, comprehensive range of certifications and industry-leading insights , we lead by example to amplify excellence within the organisations that we support. With onsite practical experience and deep knowledge of industry processes, policies, and regulations, you'll help clients reach their full potential. While internal audit experience is helpful, it's not mandatory as we offer comprehensive training via our academy. Following your Global and Divisional inductions, you will embark on a 12-week training programme, including classroom and onsite learning with a Senior Lead Auditor to achieve your Lead Auditor qualifications within Quality Management Systems (9001) and Information Security Management Systems (27001). We’re particularly interested in candidates who bring experience beyond IT. Be sure to highlight any work experience since leaving education on your CV. Plan, conduct, and lead independent, third-party audits Gather objective evidence and prepare clear, impartial audit reports Host opening and closing meetings to communicate findings Build and maintain professional client relationships Continue developing your knowledge of the industry and evolving standards Complete auditor training and achieve your Lead Auditor qualifications (supported by ISOQAR) You’ll bring hands-on operational experience from a relevant industry or industries and understand how organisations operate day to day. Strong communication skills, analytical thinking and clear, accurate report writing are essential, alongside a professional and methodical approach. You’ll also be comfortable with regional and national travel (including occasional overnight stays) and hold a full UK driving licence. Your integrity, technical knowledge, and ability to deliver high-quality, value-adding audit reports will enable you to thr

At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their highest potential. Through our robust portfolio of progressive solutions, comprehensive range of certifications and industry-leading insights , we lead by example to amplify excellence within the organisations that we support. Due to continued growth, we are expanding our Lead Auditor team across the South East and are seeking professionals based within commutable distance of London. With onsite practical experience and deep knowledge of industry processes, policies, and regulations, you'll help clients reach their full potential. While internal audit experience is helpful, it's not mandatory as we offer comprehensive training via our academy. Following your Global and Divisional inductions, you will embark on a 12-week training programme, including classroom and onsite learning with a Senior Lead Auditor to achieve your Lead Auditor qualifications within Quality Management Systems (9001) and Information Security Management Systems (27001). We’re particularly interested in candidates who bring experience beyond IT. Be sure to highlight any work experience since leaving education on your CV. Plan, conduct, and lead independent, third-party audits Gather objective evidence and prepare clear, impartial audit reports Host opening and closing meetings to communicate findings Build and maintain professional client relationships Continue developing your knowledge of the industry and evolving standards Complete auditor training and achieve your Lead Auditor qualifications (supported by ISOQAR) You’ll bring hands-on operational experience from a relevant industry or industries and understand how organisations operate day to day. Strong communication skills, analytical thinking and clear, accurate report writing are essential, alongside a professional and methodical approach. You’ll also be comfortable with regional and national travel (including occasional overnight stays)

At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their highest potential. Through our robust portfolio of progressive solutions, comprehensive range of certifications and industry-leading insights , we lead by example to amplify excellence within the organisations that we support. Due to continued growth, we are expanding our Lead Auditor team across the South East and are seeking professionals based within commutable distance of London. With onsite practical experience and deep knowledge of industry processes, policies, and regulations, you'll help clients reach their full potential. While internal audit experience is helpful, it's not mandatory as we offer comprehensive training via our academy. Following your Global and Divisional inductions, you will embark on a 12-week training programme, including classroom and onsite learning with a Senior Lead Auditor to achieve your Lead Auditor qualifications within Quality Management Systems (9001) and Information Security Management Systems (27001). We’re particularly interested in candidates who bring experience beyond IT. Be sure to highlight any work experience since leaving education on your CV. Plan, conduct, and lead independent, third-party audits Gather objective evidence and prepare clear, impartial audit reports Host opening and closing meetings to communicate findings Build and maintain professional client relationships Continue developing your knowledge of the industry and evolving standards Complete auditor training and achieve your Lead Auditor qualifications (supported by ISOQAR) You’ll bring hands-on operational experience from a relevant industry or industries and understand how organisations operate day to day. Strong communication skills, analytical thinking and clear, accurate report writing are essential, alongside a professional and methodical approach. You’ll also be comfortable with regional and national travel (including occasional overnight stays)

Please note – this is a subcontractor Talent Pool. We will only be in touch if a suitable role is available in your area. At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their highest potential. Through our robust portfolio of progressive solutions, comprehensive range of certifications and industry-leading insights , we lead by example to amplify excellence within the organisations that we support. We are seeking an experienced and qualified Lead Auditor to join our team on a subcontract basis. The ideal candidate will have a strong background in electrical engineering, electrical goods, manufacturing, calibration, or mobile phone industries, along with proven experience auditing ISO standards, Plan, conduct, and report on audits for ISO 9001, 14001, 45001, and 27001 compliance, ensuring full adherence to the standards. Provide clear and constructive feedback on findings to clients, helping them understand areas of compliance and opportunities for improvement. Review and verify clients’ management systems, documenting compliance levels and preparing detailed audit reports. Maintain strong knowledge of current ISO standards and best practices. Collaborate with client teams and stakeholders to support them through the audit process. Requirements: Must hold Lead Auditor certifications for ISO 9001, 14001, 45001, and/or 27001. A minimum of 3 years of relevant auditing experience across these standards, preferably in a variety of industries. Strong understanding of compliance requirements for quality, environmental, health and safety, and information security management systems. Excellent analytical, report-writing, and communication skills. Full Driving Licence. Travel to client locations as needed. Proven track record of independent or subcontracted audit roles. Familiarity with relevant legal and regulatory requirements in the field of ISO management standards.

Please note – this is a subcontractor Talent Pool. We will only be in touch if a suitable role is available in your area. At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their highest potential. Through our robust portfolio of progressive solutions, comprehensive range of certifications and industry-leading insights , we lead by example to amplify excellence within the organisations that we support. We are seeking an experienced and qualified Lead Auditor to join our team on a subcontract basis. The candidate must possess expertise in conducting audits for ISO standards, specifically ISO 9001, ISO 14001, ISO 45001, and/or ISO 27001 This role requires a skilled auditor who can evaluate, assess, and report on an organisation’s adherence to these standards with professionalism and precision. Plan, conduct, and report on audits for ISO 9001, 14001, 45001, and 27001 compliance, ensuring full adherence to the standards. Provide clear and constructive feedback on findings to clients, helping them understand areas of compliance and opportunities for improvement. Review and verify clients’ management systems, documenting compliance levels and preparing detailed audit reports. Maintain strong knowledge of current ISO standards and best practices. Collaborate with client teams and stakeholders to support them through the audit process. Requirements: Must hold Lead Auditor certifications for ISO 9001, 14001, 45001, and/or 27001. A minimum of 3 years of relevant auditing experience across these standards, preferably in a variety of industries. Strong understanding of compliance requirements for quality, environmental, health and safety, and information security management systems. Excellent analytical, report-writing, and communication skills. Full Driving Licence. Travel to client locations as needed. Proven track record of independent or subcontracted audit roles. Familiarity with relevant legal and regulatory requirements in t

Please note – this is a subcontractor Talent Pool. We will only be in touch if a suitable role is available in your area. At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their highest potential. Through our robust portfolio of progressive solutions, comprehensive range of certifications and industry-leading insights , we lead by example to amplify excellence within the organisations that we support. We are seeking an experienced and qualified Lead Auditor to join our team on a subcontract basis. The ideal candidate will have a strong background in electrical engineering, electrical goods, manufacturing, calibration, or mobile phone industries, along with proven experience auditing ISO standards, Plan, conduct, and report on audits for ISO 9001, 14001, 45001, and 27001 compliance, ensuring full adherence to the standards. Provide clear and constructive feedback on findings to clients, helping them understand areas of compliance and opportunities for improvement. Review and verify clients’ management systems, documenting compliance levels and preparing detailed audit reports. Maintain strong knowledge of current ISO standards and best practices. Collaborate with client teams and stakeholders to support them through the audit process. Requirements: Must hold Lead Auditor certifications for ISO 9001, 14001, 45001, and/or 27001. A minimum of 3 years of relevant auditing experience across these standards, preferably in a variety of industries. Strong understanding of compliance requirements for quality, environmental, health and safety, and information security management systems. Excellent analytical, report-writing, and communication skills. Full Driving Licence. Travel to client locations as needed. Proven track record of independent or subcontracted audit roles. Familiarity with relevant legal and regulatory requirements in the field of ISO management standards.

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Coinbase is looking for a Senior Manager, Security Audit to lead the Internal Audit team's global coverage of information security, cybersecurity, and infrastructure/application security. Reporting to the Global Head of Internal Audit, you'll own the security audit portfolio, spanning identity and access management, threat detection, incident response, cloud security, application security, and crypto-native controls (wallets, cold storage, key management), while managing a small team and carrying your own book of complex audits. What you'll do: Own and lead Coinbase's global security audit portfolio covering IAM, threat detection, incident response, security architecture, cryptography/key management, vulnerability management, application security, and crypto-native security (wallets, cold storage), third-party/outsourced security oversight Partner with Security Engineering, Detection & Response, and AppSec teams as the cybersecurity subject matter expert, providing independent audit perspective and advisory value while maintaining third-line objectivity. Manage and develop a team of security auditors while personally leading high-complexity, high-risk security engagements across multiple jurisdictions. Synthesize complex technical security findings into clear, risk-prioritized reports for executive leadership, the Audit Committee, and the Board. Drive proactive i

About Syllo Syllo is on a mission to transform litigation. Our product is an AI-powered litigation workspace that enables lawyers and paralegals to safely harness the power of language models throughout the litigation life cycle. Since going to market, we have gained a diverse group of enterprise customers, including some of the biggest law firms in the country, and we are quickly expanding. By reducing the expense of litigation industry-wide, we aim to improve access to high-quality representation and promote the alignment of legal outcomes with merit. We’re looking for a Data Security Compliance Director who will own the compliance-side and business operations related to Company’s data security function. About the role Syllo is a legal technology company building infrastructure that law firms and legal teams trust with sensitive data. Compliance isn't a checkbox here, it's a product feature. We're looking for a Data Security Compliance Director to own our certification programs, manage vendor security relationships and processes, own the accurate and timely completion of our security disclosures in the sales context, and keep our posture audit-ready year-round. This role sits at the intersection of compliance and engineering. While this role does not own the security of our technical stack from an engineering perspective, you will work directly with technical teams to implement controls, close evidence gaps, and translate technical postures and requirements into concrete and well communicated action. Responsibilities - ISO 27001. Maintain and continuously improve our Information Security Management System. Manage internal audits, corrective actions, and annual surveillance cycles through Vanta. - SOC 2 Type II. Coordinate evidence collection, liaise with external auditors, and drive remediation across engineering and operations. - Vendor security. Lead vendor security assessments, manage VSQ responses (inbound and outbound), and maintain a tiered

We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. About the Role Hasbro is seeking a Principal SAP Security Analyst to join our IT Security team in Montreal. This senior individual contributor position will assist in steering access governance, role development, compliance readiness, and security controls across SAP ECC, S/4HANA, SAP RISE, SAP Business Technology Platform, Identity Authentication Service, and Identity Provisioning Service. We are shifting more SAP security responsibility internally and need someone who can guide complex tasks through knowledge, collaboration, and sound judgment. This role is not a people manager position, but it does provide technical direction to SAP analysts, access administrators, project teams, business partners, auditors, and implementation partners. What You’ll Do Build SAP security architecture, standards, access models, and role design practices. Support our migration to SAP RISE, including role mapping, identity integration, access transition, privileged access, connectivity, and post-migration controls. Develop and enhance Role-Based Access Control models that uphold least-privilege, address business needs, and meet compliance requirements. Lead role cleanup, redesign, simplification, and Segregation of Duties remediation. Set up and maintain SAP Identity Access Governance and SAP Governance Risk and Compliance, covering connectors, workflows, risk rules, provisioning, access analysis, and reporting. Strengthen access provisioning, access reviews, emergency and privileged access oversight. Support SOX and IT General Contro

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft connects people to transportation to change the way we live and get around our communities. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft's Customer Trust team ensures that appropriate security controls and data protections are applied to meet our compliance requirements and customer contractual commitments. We conduct security risk assessments, consult with organizational stakeholders, monitor and continuously improve Lyft's Information Security program, facilitate third-party security audits, work with engineering teams to implement, automate, and monitor security controls, develop policies, and advise on all matters related to information security assurance. We are looking for a highly motivated, organized, and detail-oriented individual to join our Customer Trust team. As a senior member of this team, you will own a portfolio of concurrent, multi-program compliance efforts and help ensure Lyft meets its enterprise promises and contractual commitments to customers on security and privacy across global markets. You'll manage relationships with external auditors and internal stakeholders, scale our program through efficient processes and automation, and serve as a trusted advisor on technical compliance matters spanning North America, the EU, and the UK. Responsibilities: Program & Audit Ownership Own and lead our ISO 27001 compliance program end-to-end, from certification planning and internal audit through surveillance cycles and Statement of Applicability updates Drive execution across our multi-program compliance portfolio spanning SOC 2, PCI DSS, HIPAA, and NIST CSF, alongside global and international frameworks including UK Cyber Essentials, Spain ENS, and emerging EU re

About the team: The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. About the role: Rubrik is seeking a Senior Commercial Compliance Analyst to lead Commercial Audit and Certification Management. In this role, you will own Rubrik's portfolio of security certifications and coordinated audits end-to-end, from evidence collection through auditor management to final report delivery, ensuring audit readiness is continuous and audit findings are tracked to closure. What you'll do: Own the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level 1 and Level 2, TISAX Level 1 and Level 2, HITRUST, HIPAA. Serve as the primary point of contact for external auditors and certification bodies, managing scoping, fieldwork, evidence requests, and remediation of findings through to closure. Maintain the mapping between compliance controls and underlying evidence sources so audit readiness is continuous rather than a point-in-time scramble. Drive coordinated audit strategy, consolidating overlapping evidence requests across frameworks to reduce duplicate work for control owners. Lead evaluation and scoping of emerging and planned certifications to support Rubrik's international and AI governance expansion. Manage the lifecycle of certifications end-to-end, including retirements and transiti

Sr. GRC Engineer The Team + The Role Pendo's Information Security team protects the data entrusted to Pendo and helps ensure our products are built with security and privacy by design. The team spans Security Operations, Product Security, and Compliance and Risk. With a small team and broad scope, the work directly supports the security, resilience, and trust of Pendo's products and operations. The Sr. GRC Engineer is an AI-first technical leader who helps drive the evolution of Pendo's governance, risk, and compliance program. This role independently leads complex compliance, risk, and incident-response work while identifying program maturity gaps, translating security risk into business terms, and contributing to security roadmap and investment decisions. Success means building durable controls and programs that reduce risk and operational friction, not simply completing audits. This role is based in our Raleigh office. What this looks like day-to-day AI-driven compliance and operations acceleration: Use AI to accelerate audit evidence preparation, policy documentation, control testing workflows, and regulatory research. Evaluate GRC platform automation capabilities and integrate AI tooling where it reduces manual overhead, then document and share effective approaches with the team. Security program strategy and roadmap: Identify maturity gaps across compliance and security operations and translate them into prioritized roadmap recommendations grounded in business risk. Contribute to security investment discussions, clarify tradeoffs between coverage, cost, and risk, and anticipate emerging regulatory requirements before they become audit findings. Compliance program ownership: Own one or more regulatory compliance programs end-to-end, including SOC 2 Type II, ISO 27001/42001, PCI-DSS, GovRAMP, or FedRAMP. Lead control design, evidence collection, auditor relationships, and remediation tracking to maintain effective and durable compliance programs. Risk assessment

About the role We are seeking an experienced and detail-oriented Information Security and Cloud Security Auditor to join our team. The ideal candidate will have 3-7 years of expertise in data security and privacy control implementation, internal auditing, third-party risk management, cybersecurity governance, and cloud security (banking sector preferred). This role will be responsible for conducting comprehensive IT and cloud security audits, ensuring compliance with regulatory requirements, and enhancing our information security policies and procedures. Key Responsibilities -Conduct IT and cloud security audits across various domains, including IT General Controls (ITGC), Information Security Controls, Cloud Security, Network Security, Vulnerability Management, and Vendor Risk Assessments. -Assess compliance with relevant laws, regulations, industry standards, and organizational policies across both on-premises and cloud environments. -Develop and enhance information security and cloud security policies and procedures in alignment with industry best practices. -Maintain thorough documentation of audit findings, risk assessments, security measures, working papers, audit program checklists, and evidence for internal and external reporting. -Validate ITGC, cloud security, and application-specific controls and manage audit documentation, risk assessments, evidence gathering, and control testing. -Follow up on audit findings and ensure timely closure of non-compliance and security issues identified during audits. -Manage and oversee third-party risk assessments and audits, ensuring robust security controls are implemented across traditional and cloud-based service providers. -Lead and participate in the development, migration, and implementation of security controls and policies for network and cloud security solutions. -Conduct risk-based security assessments of internal, vendor, and third-party hosted environments, covering both traditional IT infrastructure and cloud

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The Role: SoFi's Cyber Defense organization is looking for an Offensive Security Lead to mature and grow our Penetration Testing and Red Team functions. This is a hands-on leadership role for someone who has spent years both doing the work and building the program around it — someone equally comfortable running a red team engagement against a critical banking platform and designing the operating model that lets a small team of offensive operators keep pace with a fast-growing fintech. A defining part of this role is modernizing how the team scales. We're looking for a leader who has already built and implemented AI-assisted penetration testing and red teaming programs — using AI tooling to accelerate reconnaissance, exploit development, attack-path analysis, and reporting — and who can bring that experience to bear on the program. You'll own the strategy, staffing, tooling, and execution quality of both disciplines, report into Cyber Defense leadership, and act as a trusted advisor to engineering, product, and risk partners across the company. What You’ll Do: Lead and unify Penetration Testing and Red Team into a single, cohesive Offensive Security function — shared standards, shared tradecraft, shared reporting, distinct missions. Set and execute the offensive security roadmap, aligning testing scope