[Hiring] Internal Auditor @Workstreet

Role Description

We are seeking a detail-oriented and proactive Internal Auditor to join our compliance team. This role is ideal for someone with a strong understanding of information security and compliance frameworks, paired with excellent project management and analytical skills. You will be responsible for reviewing and validating control evidence within any GRC platform to ensure ongoing compliance with standards such as ISO 27001, ISO 42001, HIPAA, and GDPR.

What you'll do

• Validate Compliance Evidence: Review, assess, and verify documentation and control evidence within the GRC platform (Vanta or any platform that the client utilizes) to confirm alignment with ISO 27001, ISO 42001, HIPAA, and GDPR requirements.
• Conduct Internal Audits: Coordinate internal audits and readiness assessments to identify control gaps and recommend effective remediation actions.
• Communicate Audit Insights: Provide clear, timely updates and expectations to internal teams regarding audit timelines, deliverables, and compliance outcomes.

Qualifications

• Proven GRC and compliance auditor: 2–5 years of active execution in internal auditing, information security compliance, or Governance, Risk, and Compliance (GRC) roles.
• Framework translation architect: Mastered the execution and structural demands of international standards including ISO 27001, ISO 42001, HIPAA, and GDPR.
• GRC automation driver: Deployed and managed automated evidence collection, continuous control monitoring, and real-time audit readiness.
• Disciplined audit portfolio manager: Systematically orchestrate and execute multiple fast-moving compliance initiatives simultaneously.
• Cross-functional alignment engine: Deliver authoritative, precision-focused written and verbal English communication.
• Surgical gap analyst: Apply micro-level critical analysis to isolate design flaws in control documentation.
• Credentialed industry professional: Hold or actively pursue technical designations such as CPA, CIA, CISA, or ISO Lead Auditor.

Requirements

• Prior success navigating hyper-growth cloud software architectures and subscription environments.
• Active exposure to foundational information security protocols and network vulnerability testing parameters.
• Direct experience auditing complex system logs and validating technical evidence parameters.

Benefits

• Career Development: Clear path with mentorship and training opportunities.
• Role-Related Training: Reimbursement for the successful completion of approved training and certification courses.
• Competitive Compensation: A competitive base salary with regular performance reviews and bonus opportunities.
• Growth Opportunity: Early-stage company with significant room for career advancement.
• Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team.

What you'll need to thrive

• Excellent written and verbal English communication skills.
• A reliable, high-speed internet connection and a professional home office environment.
• Commitment to working a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time (ET).
• Willingness and ability to travel locally for occasional onsite meetings.

Hiring and Selection Process

• Candidates must participate in live video interviews throughout the hiring process with camera on.
• Employment is contingent upon successful completion of identity verification and background screening.
• Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders.
• Candidates will receive prompt updates and consistent communication throughout the interview process.

Workstreet Is An Equal Opportunity Employer

As an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.