[Hiring] Audit & Assurance Specialist @Lumin Digital

Role Description

The Audit and Assurance Specialist is a core member of Lumin Digital's Audit and Assurance team, sitting within the Risk organization. This role is responsible for the design, monitoring, and continuous improvement of security and compliance controls across Lumin's regulatory frameworks, including SOC 2, PCI DSS, ISO 27001, HIPAA, and other applicable standards.

• Design, document, and implement security and compliance controls across applicable frameworks.
• Assess the design and operating effectiveness of controls, escalating deficiencies and exceptions promptly.
• Partner with Engineering, Product, Operations, and other teams to ensure controls are practical and enforceable.
• Conduct structured control testing through evidence review, system inspection, policy analysis, stakeholder interviews, and configuration validation.
• Maintain dashboards and metrics that give leadership clear visibility into control coverage, maturity, and performance trends.
• Manage the Plan of Action and Milestones (POA&M) process within the assigned scope.
• Serve as a day-to-day liaison for external audits and assessments.
• Manage auditor document request lists and coordinate evidence collection across internal teams.
• Execute Lumin’s internal audit program by running audit plans and producing clear working papers and draft reports.
• Complete and deliver security questionnaires from existing clients and prospective customers.
• Support Lumin’s AI assurance efforts by performing control testing on AI and machine-learning systems.
• Maintain a current library of standardized questionnaire responses and share knowledge with teammates.
• Monitor regulatory and industry framework changes and share recommendations for maintaining compliance expectations.
• Perform other duties as assigned.

Qualifications

• Bachelor’s degree in a relevant field, such as Information Systems, Business, or Risk Management, preferred.
• Certifications such as CISA, Security+, or equivalent are preferred; CRISC, ISO 27001 Lead Implementer/Auditor are a plus.
• Four (4) or more years of professional experience in information security, GRC, compliance, IT audit, or a related field required.
• Demonstrated experience designing, evaluating, and improving security controls within a GRC platform is required.
• Experience working in a regulated financial services, fintech, or similarly regulated SaaS environment required.
• Hands-on experience managing or supporting external audits or assessments required.
• Experience developing or contributing to an internal audit program preferred.
• Experience completing security questionnaires, RFPs, or vendor due diligence requests preferred.
• Experience managing POA&M processes preferred.
• Experience coordinating across cross-functional technical and non-technical teams is required.

Requirements

• Deep familiarity with security and compliance frameworks, including SOC 2, PCI-DSS, ISO 27001, HIPAA, NIST 800-53, and related standards.
• Strong understanding of control design principles.
• Ability to assess control applicability and effectiveness in a SaaS environment.
• Strong project coordination and organizational skills.
• Excellent written and verbal communication skills.
• Ability to build and maintain program-level dashboards and reporting.
• Critical thinker with strong attention to detail.
• Comfortable engaging directly with external auditors, clients, and prospects.
• Ability to design and improve security workflows within GRC platforms.
• Working knowledge of AI/ML governance and control considerations.
• Self-directed and capable of operating with a high degree of independence.

Benefits

• Medical, dental, and vision insurance.
• 401(k) with company match.
• Flexible PTO plus 12 paid holidays.
• Paid sick leave, parental and family leave.
• Lifestyle spending account.
• Tuition reimbursement.
• Cell phone stipend.

Company Description

Lumin Digital is a trailblazer in digital banking solutions, driven by a unique approach to technology, service, and people. We empower credit unions and banks by creating cutting-edge digital experiences that continuously serve, engage, and grow their membership base.

At Lumin, we thrive on curiosity and innovation. Our culture is built on trust in our expertise and decisions, respect for diverse perspectives and talents, and boldness in pursuing new ideas.