We're currently seeking a
Senior Information Security Internal Auditor to join our team. This is a fully remote, home-based role open to candidates located anywhere in the United States.
What you'll do- Develop and maintain the information security internal audit program within the Compliance portfolio, aligning it with FedRAMP, CMMC and other applicable requirements.
- Maintain Everbridge's Information Security and Privacy Framework, including its policies, procedures, standards and guidelines.
- Translate framework requirements into clear, testable technical controls and acceptance criteria that engineering teams can implement.
- Partner with Engineering, DevOps and Security to integrate effective controls into existing workflows.
- Own monthly continuous monitoring (ConMon) assessments and submissions.
- Coordinate with Engineering and Operations to deliver CMMC and FedRAMP documentation on time and meet project milestones.
- Serve as a technical point of contact during audits. Explain architecture, data flows and control evidence, and help auditors understand how requirements apply in a cloud environment.
- Represent Compliance in FedRAMP, CMMC and other certification projects and strategy discussions.
- Build and maintain automated evidence collection across cloud platforms, identity providers, CI/CD pipelines and ticketing systems.
- Develop policy-as-code and continuous control monitoring checks using tools such as OPA, Cloud Custodian or AWS Config.
- Own and improve the GRC platform and its integrations.
- Create audit plans and reports, maintain organized documentation and evidence, and establish clear processes and guidelines.
- Develop approaches for continuous monitoring and recertification, support external audits and assist with other audit activities as needed.
What you'll bring:- At least three years of experience in security, assessments, compliance consulting or advisory work in a highly technical environment.
- At least three years of experience performing or supporting technical assessments for a major compliance effort, such as CMMC, FedRAMP, SOC 2, BSI C5 or ISO 27001.
- Experience with CMMC, DFARS, NIST SP 800-171, FedRAMP, NIST SP 800-53, FISMA or similar governance and compliance frameworks.
- Experience in cloud security, platform engineering or DevSecOps.
- Experience with Infrastructure as Code, such as Terraform, and integrating security tools into CI/CD pipelines.
- Strong understanding of information collection, reporting and documentation processes, including developing status reports, metrics and measures.
- Ability to explain technical risk to non-technical stakeholders and translate audit requirements for engineers, both verbally and in writing.
- Clear communication, strong organization and interpersonal skills, and the ability to take initiative and influence decision-makers.
- A CISSP, CIA, CISA, CySA+, CCSP or ISO 27001 Auditor certification is a plus.
- Must be a U.S. citizen and able to obtain a Secret clearance.
$118,700 - $158,200 a year
#LI-HG1
The reasonably estimated salary for this role at Everbridge ranges from $118,000 - $158,200 and may also include variable compensation. Actual compensation is based on factors such as the candidate's skills, qualifications, and experience. In addition, Everbridge offers a wide range of best in class, comprehensive and inclusive employee benefits for this role including healthcare, dental, parental planning, and mental health benefits, disability income benefits, life and AD&D insurance, a 401(k) plan and match, paid time off, and fitness reimbursements.
