Security Compliance Audit Coordinator

UPK01 - San Jose, CR, Ultrapark 2 (UPK01)

DXC Technology

DXC Technology helps global companies run their mission-critical systems and operations while modernizing IT, optimizing data architectures, and ensuring security and scalability across public, private and hybrid clouds.

View all jobs at DXC Technology

Apply now Apply later

Job Description:

Security Compliance Audit Coordinators are responsible for planning, coordinating, facilitating, and providing guidance to DXC account and delivery teams, and/or groups of control owners and subject matter experts responsible for specific operational areas and functions supporting technology systems or tools (collectively referred to herein as “DXC teams”) in the scope of System and Organization Controls (SOC) audits and other attest engagements.  The Associate Manager Digital Assurance will plan and coordinate the development and execution of the internal audit plan for appropriate regulatory and assurance compliance audit coverage, and interface/assist external audit teams as needed. The Associate Manager Digital Assurance will act as a liaison between the DXC teams and the auditing firm ensuring effective planning, creation of and adherence to timelines and effective communication and interpretation of SOC audit evidence and issues.  Candidates should have a strong background in developing processes, procedures, and methodologies to ensure compliance.

The selected candidate will: 

  • Become familiar with SOC audit and security compliance requirements to effectively communicate DXC security standards and SOC audit requirements (e.g., SSAE 18, ISAE 3000, ISAE 3402) as needed to help DXC teams achieve successful audit outcomes. 
  • Understand in-country regulatory requirements regarding sharing data internal and external to DXC. 
  • Develop a compliance verification strategy in collaboration with DXC teams. 
  • Analyze and proactively plan and communicate changes within control environments for the assigned control area(s), to identify, evaluate, and address risks and impact to the SOC audits, DXC teams and internal organizations.
  • Serve as the primary point of contact for questions related to the assigned control area(s) managed for SOC audits.  

Responsibilities include:

  • Creates and updates audit plans, and manages control procedures. 
  • Plans and executes internal information security assessments and audit engagements. 
  • Improves audit experience for DXC teams and customers by providing timely and accurate audit guidance and supporting audit evidence.
  • Verifies compliance with security policies. 
  • Performs internal risk analysis and creates remediation plans to ensure compliance.
  • Manages audit activities and maintains understanding of audit requirements to meet audit timelines.

Job Requirements, Essential: 

  • Previous auditor experience with an auditing firm is a strong plus.
  • Experience with emphasis in information technology, information security, regulatory or other compliance management. 
  • Excellent understanding of project management principles. 
  • Experience with risk management techniques. 
  • Knowledge of regulatory and assurance compliance requirements (such as ISO 27001, SSAE 18 (SOC 1 & 2), HIPAA/HITECH, PCI, NIST 800-53, and/or Data Privacy). 
  • Excellent communication skills; written and verbal. 
  • Team player.
  • Experience with GRC tools (such as Archer) a plus.

Qualifications:

  • 4 + years experience in security, compliance, and data privacy. 
  • Bachelors, undergraduate degree, equivalent diploma, or combination of education and relevant experience. 
  • Skilled in planning, problem solving, analysis, collaboration, and communication. 
  • Strong organization skills to balance work and execute audit plans for complex systems in a highly matrixed organization.
  • Proficient with Microsoft Office suite (Word, Excel, PowerPoint) & Share Point. 
  • Advanced English level.
  • Professional certifications such as PMP, CISA, CISM, CISSP, etc. a plus.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.

Apply now Apply later
  • Share this job via
  • 𝕏
  • or

* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰

Job stats:  0  0  0
Category: Compliance Jobs

Tags: Audits CISA CISM CISSP Compliance HIPAA ISO 27001 NIST NIST 800-53 Privacy Risk analysis Risk management Security assessment SOC SOC 1 Strategy

Perks/benefits: Career development

Region: North America
Country: United States

More jobs like this

Explore more career opportunities

Find even more open roles below ordered by popularity of job title or skills/products/technologies used.