Want to know if this job is worth applying to?
Brasil
Remote only
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Internal Security Compliance Auditor based in Brazil.
We are looking for a detail-oriented Internal Security Compliance Auditor to strengthen the quality and reliability of cybersecurity compliance programs across multiple client engagements. In this role, you will review security controls, validate supporting documentation, and ensure client evidence meets the requirements of major regulatory and industry frameworks. You will work closely with Security Program Managers and engineering teams to identify compliance gaps and prepare organizations for successful external audits. Your expertise will contribute to maintaining high-quality standards across SOC 2, ISO 27001, PCI, HIPAA, and GDPR requirements. You will also help improve internal quality assurance methodologies and provide valuable feedback to enhance compliance processes and technology. This is an opportunity to join a fast-growing, remote-first cybersecurity environment where autonomy, collaboration, and meaningful impact are highly valued.
You will oversee internal compliance quality assurance activities, ensuring that client documentation, security controls, and supporting evidence are accurate, complete, and ready for independent external audits.
Conduct thorough internal reviews of client-submitted evidence across multiple compliance frameworks, including SOC 2, ISO 27001, PCI, HIPAA, and GDPR.
Perform detailed quality assurance checks on individual security controls to verify the completeness, accuracy, and sufficiency of supporting documentation.
Execute comprehensive final readiness reviews before clients engage with third-party auditing firms.
Identify evidence gaps, documentation weaknesses, and control deficiencies, recommending practical improvements to strengthen audit readiness.
Develop, maintain, and improve internal quality assurance standards, review methodologies, and audit preparation procedures.
Create guidance materials and documentation to help clients improve the quality and consistency of their compliance evidence.
Collaborate with Security Program Engineers and Security Program Managers to address compliance gaps and resolve technical documentation issues.
Monitor changes in regulatory requirements and industry standards to ensure internal reviews remain aligned with evolving compliance frameworks.
Track audit readiness metrics, evaluate review effectiveness, and identify opportunities to improve internal processes.
Provide expert feedback to product teams to enhance compliance platform capabilities and improve the overall pre-audit preparation experience.
Requirements:
The ideal candidate combines strong technical knowledge of cybersecurity controls with hands-on experience in compliance auditing, evidence evaluation, and internal quality assurance.
Deep understanding of SOC 2, ISO 27001, PCI, HIPAA, and GDPR requirements.
Strong technical knowledge of information security controls, their implementation, and supporting documentation.
Proven experience reviewing and evaluating evidence for compliance audits, particularly in preparing organizations for external assessments.
Previous experience conducting pre-audit preparation, internal compliance reviews, and quality assurance activities across multiple frameworks.
Exceptional attention to detail and a strong quality control mindset.
Excellent written communication skills, with the ability to document findings, explain deficiencies, and provide clear recommendations.
Ability to work independently, manage multiple client engagements, and consistently deliver high-quality reviews.
Familiarity with compliance automation platforms and security governance tools.
Strong analytical and problem-solving skills, with the ability to identify weaknesses and recommend effective corrective actions.
Additional qualifications that would be advantageous:
Relevant professional certifications, such as CISA or ISO 27001 Lead Auditor.
Experience working with multiple cybersecurity and regulatory compliance frameworks.
Previous involvement in developing internal audit methodologies, evidence review standards, or compliance quality assurance processes.
Benefits:
Competitive Compensation: Annual base salary benchmarked according to location, skills, experience, and relevant qualifications. The advertised US baseline range is $35,000–$65,000 USD.
Equity: Opportunity to participate in company equity compensation.
Health & Wellness: Comprehensive health and wellness benefits.
Paid Time Off: 20 days of annual paid time off, plus 8 floating holidays.
Remote Work: Fully remote, remote-first working environment with global hiring opportunities where compliant employment arrangements are available.
International Team Events: Opportunities to participate in team off-sites in destinations such as Amsterdam and Italy.
Professional Autonomy: A collaborative culture that values ownership, individual impact, and independence over micromanagement.
Meaningful Work: Opportunity to solve complex cybersecurity and compliance challenges while contributing to the development of innovative security solutions.
Collaborative Environment: Work alongside experienced, ambitious, and supportive professionals in the cybersecurity industry.