[Hiring] Senior Information Security Internal Auditor @Everbridge

Role Description

We’re currently seeking a Senior Information Security Internal Auditor to join our team. This is a fully remote, home-based role open to candidates located anywhere in the United States.

• Develop and maintain the information security internal audit program within the Compliance portfolio, aligning it with FedRAMP, CMMC and other applicable requirements.
• Maintain Everbridge’s Information Security and Privacy Framework, including its policies, procedures, standards and guidelines.
• Translate framework requirements into clear, testable technical controls and acceptance criteria that engineering teams can implement.
• Partner with Engineering, DevOps and Security to integrate effective controls into existing workflows.
• Own monthly continuous monitoring (ConMon) assessments and submissions.
• Coordinate with Engineering and Operations to deliver CMMC and FedRAMP documentation on time and meet project milestones.
• Serve as a technical point of contact during audits. Explain architecture, data flows and control evidence, and help auditors understand how requirements apply in a cloud environment.
• Represent Compliance in FedRAMP, CMMC and other certification projects and strategy discussions.
• Build and maintain automated evidence collection across cloud platforms, identity providers, CI/CD pipelines and ticketing systems.
• Develop policy-as-code and continuous control monitoring checks using tools such as OPA, Cloud Custodian or AWS Config.
• Own and improve the GRC platform and its integrations.
• Create audit plans and reports, maintain organized documentation and evidence, and establish clear processes and guidelines.
• Develop approaches for continuous monitoring and recertification, support external audits and assist with other audit activities as needed.

Qualifications

• At least three years of experience in security, assessments, compliance consulting or advisory work in a highly technical environment.
• At least three years of experience performing or supporting technical assessments for a major compliance effort, such as CMMC, FedRAMP, SOC 2, BSI C5 or ISO 27001.
• Experience with CMMC, DFARS, NIST SP 800-171, FedRAMP, NIST SP 800-53, FISMA or similar governance and compliance frameworks.
• Experience in cloud security, platform engineering or DevSecOps.
• Experience with Infrastructure as Code, such as Terraform, and integrating security tools into CI/CD pipelines.
• Strong understanding of information collection, reporting and documentation processes, including developing status reports, metrics and measures.
• Ability to explain technical risk to non-technical stakeholders and translate audit requirements for engineers, both verbally and in writing.
• Clear communication, strong organization and interpersonal skills, and the ability to take initiative and influence decision-makers.
• A CISSP, CIA, CISA, CySA+, CCSP or ISO 27001 Auditor certification is a plus.
• Must be a U.S. citizen and able to obtain a Secret clearance.

Requirements

• $118,700 - $158,200 a year

Benefits

• Healthcare
• Dental
• Parental planning
• Mental health benefits
• Disability income benefits
• Life and AD&D insurance
• 401(k) plan and match
• Paid time off
• Fitness reimbursements