ISO Auditor

Employer Name:    Anaplan, Inc.

Position:               ISO Auditor

Job Site:               300 1st Avenue N. Suite 500, Minneapolis, MN 55401

Hours:                  Full Time; Mon-Fri (40 hrs/week)

Job Duties:

Work closely with team members within GRC and across the company to ensure appropriate control design and operating effectiveness. Support ISO compliance efforts and help support other GRC team responsibilities including other compliance audits (supporting Sarbanes-Oxley, SOC 1, SOC 2, SSAE19, FedRAMP, GDPR, or other), vendor security assurance, risk assessment and management, and customer security assurance. Will be responsible for:

• Planning and executing various internal, certification, and surveillance audits (ISO 27001, 27017, 27018, etc.)
• Evidence collection, review, tagging, storage.
• Periodic controls testing.
• Delivering audit status reports and updates to management throughout audit periods.
• Updating compliance and risk documentation.
• Improving the overall ISO compliance program.
• Mapping and gapping other compliance frameworks as requested by the business to identify opportunities for implementing new controls.
• Acting as a liaison with control owners, external auditors and assessors, and management.
• Educating extended team members and new joiners on audit requirements.
• Building automation in evidence collection processes.
• Helping select new auditing tools and techniques as the GRC team grows and matures.

Telecommuting is permissible within a commutable distance from the worksite.

Minimum Requirements:

Position requires a Bachelor’s degree in Information Technology, Information Security, Cyber Security, or related field (or foreign equivalent) and 5 years of experience in the job offered or closely related position involving internal control or risk management experience.

Special Requirements:

Requires certification in: CISA certification (or any of the following: CRISC, CISSP, CISM, CIPT, and/or CIPM); and 5 years of experience in the following:

• Working in managing SOC 1 and 2 audits.
• FedRAMP, PCI, Sarbanes-Oxley, NIST 800-53, or UK G*CLOUD audits.
• Evaluating the completeness and accuracy of audit evidence to ensure the adequacy of control operation.

Telecommuting is permissible within a commutable distance from the worksite. Employment and background checks may be required.

Contact:  TO APPLY: Please e-mail resume to [email protected] and indicate job code REQI#000258 on resume. Proof of authorization to work in U.S. is required if hired. The company is an Equal Opportunity Employer and fully supports affirmative action practices.