Remote Senior Information Security Internal Auditor (💰~$84k, United States) at Everbridge | RemoteOK

\nEverbridge is the leading critical event management platform trusted by corporations and communities of all sizes to help keep people safe and business running! Connecting more than 100 million people and internet-enabled devices, the company assures that secure, compliant communications are delivered and confirmed, whether locally or globally.\n \nWe are currently hiring a Senior Information Security Internal Auditor. This position can be fully remote or hybrid out of one of our offices.\n\n\n\nWhat you’ll do:\n* Develop and manage the internal audit program as part of the Compliance portfolio based on FedRAMP Moderate requirements, and other applicable standards.\n* Diligently maintain the company’s Information Security and Privacy Framework and underlying policies, procedures, standards and guidelines.\n* Conduct NIST 800-53 compliance audits and assessments and provide recommendations based upon FedRAMP defined controls and industry best practices\n* Be fully responsible for Monthly FedRAMP ConMon assessments and submissions\n* Will work closely with engineering and operation teams to ensure timely delivery of FedRAMP documents and meeting project milestones and objectives\n* Liaise with auditors, articulate control implementation and impact, and describe considerations for applying security and compliance concepts to a technical cloud environment.\n* Represent Compliance on FedRAMP, and other certification project and strategies\n* Provide the necessary support with maintaining documentation/evidence/artifacts\n* Manage and organize the audits and documents using a GRC System\n* Create audit plans and audit reports\n* Keep documentation organized and document processes and guidelines\n* Develop approach for continuous monitoring efforts and recertifications\n* Assist with other audit activities as needed\n* Facilitate external audits\n\n\n\nWhat you’ll bring:\n* Experience working with FedRAMP, NIST 800-53, FISMA, and/or similar governance and compliance framework\n* Strong understanding of FedRAMP information collection and reporting process\n* Experience in reports development (status, metrics, and measures)\n* Minimum 3 years of experience in security, assessments or compliance consulting or advisory work in in support of a highly technical environment.\n* Minimum 3 years of experience in performing and/or participating in technical assessments in direct support of a major compliance effort (e.g. FedRAMP, SOC 2, Bsi C5, or ISO 27001).\n* Knowledge of Information Management policies, requirements, and best practices\n* Ability to communicate in a clear and well-organized fashion and to influence decision-makers, both verbally and in writing\n* Ability to lead with initiative and persuasiveness\n* Excellent interpersonal and organizational skills\n* CIA, CISA, CCSP, ISO 27001 Auditor Certification are a plus\n\n\n\n\n\n\nThe reasonably estimated salary for this role at Everbridge ranges from $118,000 – $150,000 and may also include variable compensation. Actual compensation is based on factors such as the candidate’s skills, qualifications, and experience. In addition, Everbridge offers a wide range of best in class, comprehensive and inclusive employee benefits for this role including healthcare, dental, parental planning, and mental health benefits, disability income benefits, life and AD&D insurance, a 401(k) plan and match, paid time off, and fitness reimbursements.\n\n\n\n\nAbout Everbridge\n\n\nEverbridge empowers enterprises and government organizations to anticipate, mitigate, respond to, and recover stronger from critical events. In today’s unpredictable world, resilient organizations minimize impact to people and operations, absorb stress, and return to productivity faster when deploying critical event management (CEM) technology. Everbridge digitizes organizational resilience by combining intelligent automation with the industry’s most comprehensive risk data to Keep People Safe and Organizations Running™. For more information, visit www.everbridge.com, read the company blog, and follow on Twitter. Everbridge… Empowering Resilience\n \nEverbridge is an Equal Opportunity/Affirmative Action Employer. All qualified Applicants will receive consideration for employment without regard to race, creed, color, religion, or sex including sexual orientation and gender identity, national origin, disability, protected Veteran Status, or any other characteristic protected by applicable federal, state, or local law. \n\n#Salary and compensation\n
No salary data published by company so we estimated salary based on similar jobs related to Cloud and Senior jobs that are similar:\n\n
$60,000 — $107,500/year\n

\n\n#Benefits\n
💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n
\n\n#Location\nUnited States

Apply for this job

👉 Please reference you found the job on Remote OK, this helps us get more companies to post here, thanks!

When applying for jobs, you should NEVER have to pay to apply. You should also NEVER have to pay to buy equipment which they then pay you back for later. Also never pay for trainings you have to do. Those are scams! NEVER PAY FOR ANYTHING! Posts that link to pages with “how to work online” are also scams. Don’t use them or pay for them. Also always verify you’re actually talking to the company in the job post and not an imposter. A good idea is to check the domain name for the site/email and see if it’s the actual company’s main domain name. Scams in remote work are rampant, be careful! Read more to avoid scams. When clicking on the button to apply above, you will leave Remote OK and go to the job application page for that company outside this site. Remote OK accepts no liability or responsibility as a consequence of any reliance upon information on there (external sites) or here.