[Hiring] Cybersecurity Audit & Compliance Specialist @NTT DATA Services

Role Description

We are currently seeking a Cybersecurity Audit & Compliance Specialist - REMOTE to join our team in Pittsburgh, Pennsylvania (US-PA), United States (US). The Policy, Audits, and Questionnaires (PAQ) team plays a critical role in maintaining enterprise compliance and strengthening customer and regulatory confidence. This role will support the organization’s audit readiness and compliance efforts by:

• Supporting cybersecurity audit, compliance, and certification projects, ensuring activities and deliverables are completed accurately and on schedule.
• Supporting certification and compliance initiatives such as ISO 27001, ENS Spanish security requirements, Cyber Essentials, SOC, and other global information security frameworks and standards.
• Preparing the organization for internal and external information security audits and coordinating various stages of the audit lifecycle.
• Partnering with cross-functional teams, external advisors, auditors, and vendors to collect, organize, review, validate, and present audit evidence.
• Analyzing cybersecurity requirements across applicable standards, regulations, and corporate policies and providing guidance to stakeholders on compliance expectations.
• Performing requirements assessments and gap analyses to identify areas of non-compliance or control deficiencies.
• Developing and recommending appropriate corrective and remediation actions and tracking identified issues through closure.
• Evaluating information security provisions within vendor and customer contracts and providing guidance regarding alignment with corporate security policies and standards.
• Maintaining accurate, current, well-organized, and audit-ready compliance documentation, evidence repositories, policies, and supporting records.
• Coordinating with control owners and business stakeholders to ensure required documentation and evidence are provided within established timelines.
• Monitoring remediation activities and following up with stakeholders to ensure identified audit findings and compliance gaps are addressed.
• Assisting with initiatives focused on improving the efficiency, quality, consistency, and productivity of cybersecurity compliance, certification, and audit processes.
• Communicating audit requirements, findings, risks, and remediation status clearly to technical and non-technical stakeholders.

Qualifications

• 7+ years of strong experience in cybersecurity audit, governance, risk, and compliance (GRC) activities.
• 3+ years of working knowledge of ISO/IEC 27001 and associated information security controls and certification requirements.
• 3+ years of experience supporting internal/external audits and security certification programs.
• 5+ years of strong experience with audit evidence collection, review, validation, and documentation.
• 3+ years with cybersecurity and information security frameworks and standards such as SOC, Cyber Essentials, ENS, NIST, or similar frameworks.

Requirements

• Ability to interpret security standards and regulatory requirements and translate them into actionable compliance requirements.
• Experience conducting requirements assessments, control assessments, and gap analyses.
• Experience tracking audit findings, corrective actions, and remediation plans through completion.
• Strong project coordination and organizational skills with the ability to manage multiple compliance activities and deadlines simultaneously.
• Demonstrated ability to work effectively with cross-functional teams, control owners, auditors, vendors, and external advisors.
• Excellent documentation skills with strong attention to detail and accuracy.
• Strong written and verbal communication skills, including the ability to communicate cybersecurity and compliance requirements to diverse stakeholders.
• Relevant cybersecurity, audit, risk, or compliance certifications such as CISA, CISSP, CRISC, ISO 27001 Lead Auditor/Lead Implementer, or equivalent are preferred.
• Experience working within a large, global enterprise environment.
• Experience supporting multiple cybersecurity certification or assurance programs concurrently.
• Familiarity with reviewing cybersecurity requirements in customer and vendor contracts.
• Experience using GRC, audit management, or compliance tracking platforms is an advantage.

Benefits

• Medical, dental, and vision insurance with an employer contribution.
• Flexible spending or health savings account.
• Life and AD&D insurance.
• Short and long term disability coverage.
• Paid time off.
• Employee assistance program.
• Participation in a 401k program with company match.
• Additional voluntary or legally-required benefits.