Picus2mo ago

Senior Information Systems Auditor

Türkiye·AnkaraRemoteFull-Timesenior

OtherSystems

2 views0 saves0 applied

Apply Now

Quick Summary

Overview

Are you passionate about technology and enjoy explaining complex solutions in a way that everybody gets excited? If so, read on! About Picus Picus Security, the leading security validation company, gives organizations a clear picture of their cyber risk based on business context.

Technical Tools

cybersecuritysaas

Are you passionate about technology and enjoy explaining complex solutions in a way that everybody gets excited? If so, read on!

About Picus

Picus Security, the leading security validation company, gives organizations a clear picture of their cyber risk based on business context. Picus transforms security practices by correlating, prioritizing, and validating exposures across siloed findings so teams can focus on critical gaps and high-impact fixes. With Picus, security teams can quickly take action with one-click mitigations to stop more threats with less effort.

The Picus Security Validation Platform easily reaches across on-prem environments, hybrid clouds and endpoints coupled with Numi AI to provide exposure validation.

The pioneer of Breach and Attack Simulation, Picus delivers award-winning threat-centric technology that allows teams to pinpoint fixes worth pursuing, offering a 98% recommendation in Gartner Peer Review.

Picus is headquartered in Ankara, with a regional office in Istanbul, but our team is remote across Türkiye. Please note that all CVs must be submitted in English.

About The Role

We are seeking a Senior IS Auditor to join our fast-growing cybersecurity company and strengthen our governance, risk, and compliance capabilities at scale. This role plays a critical part in maintaining global certification readiness, enhancing control maturity, and embedding a proactive security and privacy mindset across the organization. Beyond audit execution, you will act as a strategic advisor to business and technology teams, shaping scalable and risk-aware processes in a cloud-native and AI-driven environment. You will contribute to the continuous evolution of our governance framework, ensuring alignment with international standards while enabling innovation and sustainable growth. This position directly supports regulatory confidence and reinforces the trust our global customers place in Picus.

Lead and oversee global compliance programs (ISO/IEC 27001, 22301, 27701, 20000-1, SOC 2, NIST CSF, CSA STAR) to maintain continuous audit readiness

Plan and execute risk-based IT and internal audits, with a strong focus on secure SDLC, software engineering processes, cloud infrastructure, and AI security domains

Evaluate and enhance the effectiveness of security and governance controls, driving continuous improvement across policies and processes

Contribute to RFPs and security questionnaires with accurate and strategic security and compliance input

Manage audit and security vulnerability findings end-to-end, ensuring sustainable remediation and measurable control improvements

Actively support the Third-Party Risk Management (TPRM) program by participating in SaaS security assessments and vendor due diligence

Define and track key audit and compliance metrics, reporting insights to leadership and relevant stakeholders

Assess the risk and privacy impact of emerging technologies (AI, ML, and automation), guiding engineering teams on secure adoption practices.

3+ years of hands-on experience in audit, compliance, risk management, or information security, preferably within a SaaS, cloud-native, or technology-driven environment

Hands-on experience with ISO/IEC standards (27001, 27701, 22301, 20000-1) and SOC 2, including preparation, audit coordination, and evidence management

Experience advising cross-functional stakeholders and influencing control improvements in dynamic technology environments

Practical knowledge of international security and privacy regulations (e.g., GDPR, CCPA) and related compliance practices

Experience supporting or managing Third-Party Risk Management (TPRM), vendor due diligence, and customer-facing compliance processes

Proven ability to manage multiple audits and compliance initiatives simultaneously in a fast-paced environment

Strong verbal and written communication skills in English, including documentation and policy writing.

Preferred Certifications:

ISO 27001, 22301, 27701, 20000-1 LA

ISACA certifications such as CISA, CISM, or CRISC

Experience with SOC 2, NIST, CSA STAR reporting frameworks

ITIL certification (nice-to-have)