At a Glance
- Tasks: Prepare and execute internal audits for compliance with major security standards.
- Company: Join Fortra, a leader in cybersecurity solutions, dedicated to protecting organizations.
- Benefits: Enjoy flexible work options, professional growth opportunities, and a collaborative culture.
- Why this job: Make an impact by ensuring compliance and enhancing security across diverse teams.
- Qualifications: Bachelor's degree in relevant fields and 2 years of IT audit experience required.
- Other info: Certifications like CIA or CISA are a plus!
The predicted salary is between 36000 - 60000 £ per year.
The Internal Auditor prepares and executes the internal process necessary to achieve one or more of the following compliances with an accredited audit firm: SOC 2, PCI, ISO 27001, or FedRAMP, within a product brand.
The Internal Auditor scopes the proper policy, controls, and processes to a specific product examination(s), working directly with a variety of technical and non-technical departments within Fortra.
WHAT YOU’LL DO
-
Responsible for the internal preparation and execution for one or more compliance audit engagements, within a product brand
-
Participates in interviews and walkthroughs with multiple stakeholders to communicate processes and gather evidence to for audit firm test objectives
-
Schedule, organize, and monitor audit evidence and activity through a GRC tool
-
Advise on technology, security standards, and processes to bridge the gap between practice and expected control performance
-
Review or edit reports for service systems, and control descriptions, management assertions, operation overviews, subservice organization, and user entity controls
-
Other duties as assigned
-
Bachelor’s degree in Computer Science, Security Management, Cybersecurity, or comparable work experience
-
Minimum 2 years direct experience with internal/firm IT audit, or consulting
-
Advanced knowledge of security frameworks SOC 2, PCI, ISO, CMMC, or FedRAMP
-
Excellent analytic, communication, collaboration, and documentation skills
-
Ability to articulate compliance concepts with peers and to a technical audience
-
Proficient with Microsoft 365 business applications, and GRC tools
-
Desirable Certifications: CIA, CISA, CISM, CISSP, CRISC, GIAC
Internal Auditor (GRC) employer: Fortra
Contact Detail:
Fortra Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Internal Auditor (GRC)
✨Tip Number 1
Familiarize yourself with the specific compliance frameworks mentioned in the job description, such as SOC 2, PCI, and ISO 27001. Understanding these standards will not only help you in interviews but also demonstrate your commitment to the role.
✨Tip Number 2
Network with professionals in the auditing and compliance field. Engaging with others who have experience in internal audits can provide you with valuable insights and potentially lead to referrals.
✨Tip Number 3
Brush up on your analytical and communication skills. Since the role involves interacting with various stakeholders, being able to clearly articulate compliance concepts will set you apart from other candidates.
✨Tip Number 4
Gain hands-on experience with GRC tools if you haven't already. Familiarity with these tools will not only enhance your resume but also prepare you for the practical aspects of the job.
We think you need these skills to ace Internal Auditor (GRC)
Some tips for your application 🫡
Understand the Role: Make sure you fully understand the responsibilities of the Internal Auditor position. Familiarize yourself with compliance standards like SOC 2, PCI, ISO 27001, and FedRAMP, as well as the specific requirements mentioned in the job description.
Tailor Your CV: Customize your CV to highlight relevant experience in internal auditing, compliance, and security frameworks. Emphasize your analytical skills and any direct experience with GRC tools, as these are crucial for the role.
Craft a Strong Cover Letter: Write a compelling cover letter that showcases your understanding of the compliance landscape and your ability to communicate complex concepts. Mention specific examples from your past experiences that demonstrate your qualifications for the role.
Highlight Certifications: If you have any relevant certifications such as CIA, CISA, or CISSP, make sure to prominently feature them in your application. These credentials can set you apart from other candidates and show your commitment to the field.
How to prepare for a job interview at Fortra
✨Understand Compliance Frameworks
Make sure you have a solid grasp of the compliance frameworks mentioned in the job description, such as SOC 2, PCI, ISO 27001, and FedRAMP. Be prepared to discuss how these frameworks apply to internal auditing and share any relevant experiences you've had with them.
✨Showcase Your Analytical Skills
During the interview, highlight your analytical skills by discussing specific examples where you successfully identified risks or gaps in processes. Use metrics or outcomes to demonstrate the impact of your work.
✨Prepare for Stakeholder Interaction
Since the role involves interacting with various stakeholders, practice articulating complex compliance concepts in a way that is understandable to both technical and non-technical audiences. This will show your ability to bridge communication gaps.
✨Familiarize Yourself with GRC Tools
If you have experience with GRC tools, be ready to discuss how you've used them in past roles. If not, do some research on popular GRC tools and be prepared to talk about how you would approach using them in this position.