Senior Information Security Auditor

The Role:The Senior Information Security Auditor plays a critical role in safeguarding our SaaS applications and protecting customer data.  You will conduct comprehensive security audits to identify vulnerabilities and ensure compliance with industry standards and regulations. You will work closely with DevOps and IT Engineering teams to ensure secure code.Key Responsibilities:Plan, conduct, and document thorough security assessments of our SaaS applications, focusing on identifying vulnerabilities, misconfigurations, and potential security risks.Evaluate the effectiveness of existing security controls and recommend improvements.Collaborate with development teams to remediate identified vulnerabilities and implement corrective actions.Stay up-to-date on the latest security threats and vulnerabilities specific to SaaS applications.Maintain a deep understanding of relevant security frameworks and compliance requirements (e.g., SOC 2, NIST 800-53, ISO 27001, PCI DSS, HIPAA).Prepare clear and concise audit reports, documenting findings, recommendations, and remediation progress.Partner with internal stakeholders to promote a culture of security awareness.Qualifications:Minimum 5 years of experience in information security auditing, with a strong focus on SaaS applications.Proven track record of successfully identifying and mitigating security vulnerabilities in cloud-based environments.In-depth knowledge of security frameworks and compliance requirements relevant to SaaS applications.Experience with security audit methodologies (e.g., OWASP Top 10, PTES).Proficiency in penetration testing tools and techniques.Excellent communication, collaboration, and analytical skills.Strong attention to detail and ability to prioritize tasks effectively.CISSP, CISA, or equivalent security certification is a plus.