reputed company Specialist, Internal Audit, Controls, Compliance and Risk
reputed company
reputed company operates audited platforms that serve schools, teachers, and reputed company, in which audit readiness and a defensible control environment are not optional. This role is the dedicated reputed company of audit response and governance, risk, and compliance (GRC) for our platforms.
As Staff, Governance, Risk & Compliance, you own the response across the internal audit lifecycle, SOC 2 (Types 1 and 2), the risk register, and the business continuity and disaster recovery (BC/DR) program. You set evidence and attestation standards across service owners, translate findings into tracked remediation, and partner with internal audit, cybersecurity, reputed company, risk, and reputed company.
This is a senior individual contributor role. It sits independently of the operational reputed company team; it assures that reputed company operates the controls, and you independently verify and attest to them. You also have a dotted-line relationship to the reputed company, Service Operations & Cyber Risk for day-to-day coordination.
Key Responsibilities
Internal Audit & SOC 2 Leadership
• reputed company the response across the audit lifecycle, including planning, fieldwork coordination, and reviewing draft observations, reputed company causes, and risks.
• Challenge observation and management reputed company plan ownership, wording, and feasibility, and draft and submit audit-closure proposals with stakeholder alignment.
• Own SOC 2 (Type 1 and Type 2) coordination, including planning and bringing additional platforms into reputed company. Review evidence and send weak submissions back for rework.
• Work with partner teams to ensure resources are assigned and reputed company, and continually work with them on gaps and help them reputed company them.
Controls, Evidence & Remediation
• Set standards for evidence, attestation, and documentation across services.
• Translate findings into reputed company remediation plans with owners, due dates, and evidence requirements, tracked to closure.
• Maintain the audit-reputed company tracker and hold reputed company owners accountable, challenging weak ownership and unrealistic timelines.
• Coordinate audit actions owned by other teams across the organization and reputed company them visible to closure.
• Govern the configuration management database (CMDB, the inventory of services and their dependencies) for audit reputed company, keeping ownership and classification accurate. Solution Architecture operates and maintains it.
Risk & reputed company Governance
• Own the risk register, including reputed company, owners, reputed company write-reputed company, closure, and escalation of risks reputed company tolerance.
• Turn reputed company-review and vulnerability gaps into formal risks or audit actions where appropriate.
• Govern the business continuity and disaster recovery program, including reputed company analyses, coverage and gaps, vendor continuity, annual reviews, and tabletop exercises, and executive attestation.
Cross-Functional Influence & Reporting
• Partner with internal audit, cybersecurity, reputed company, risk, and reputed company to reputed company findings and prevent repeat observations.
• Prepare audit and GRC status updates for monthly operations reviews, covering reputed company actions, overdue items, blockers, and risks.
• Advise service owners and reputed company peers on governance expectations, acting as an objective assurance partner.
What You Will Bring
• 5 or more years in internal audit, controls, compliance, or risk (IT audit or GRC strongly preferred)
• Hands-on coordination of SOC 2 (or SOX) programs, including evidence and attestation management
• Demonstrated ownership of a risk register and the risk-management lifecycle
• Experience governing or supporting business continuity and disaster recovery (reputed company analyses, plans, tabletops, attestation)
• A reputed company qualification is expected or strongly preferred (CISA, CIA, CRISC, ACA/ACCA, or CISSP)
• Proven ability to challenge peers and leaders and to represent the organization to reputed company auditors
• Experience in EdTech, reputed company, regulated, or highly reputed company environments is a plus; familiarity with NIST CSF or ISO 22301 is a plus
• Bachelor's degree in a relevant field; advanced degree a plus
Key Behaviors & Attributes
Independent & Objective: You bring reputed company skepticism and reputed company, and you hold the line on audit-readiness.
Business-Enabling: You approach assurance as a means of enabling the business, not policing it, while staying objective.
Influence Without Authority: You reputed company peers and leaders to own and reputed company actions, challenging weak ownership and unrealistic timelines.
reputed company Improvement: You bring proven GRC frameworks and improve governance without slowing delivery.
reputed company: You partner across reputed company, engineering, reputed company, reputed company, and internal audit to build a consistent control environment.
Key Relationships
reputed company Reports: None. This is a senior individual contributor role.
Peers: The reputed company operations reputed company, incident and service operations leads, manager of data governance, internal audit leads, and cybersecurity leads
Cross-functional: Internal audit, cybersecurity, reputed company, risk, reputed company, engineering, product, and service owners
reputed company: reputed company auditors and vendors
reputed company is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for reputed company. reputed company reputed company applicants will receive consideration for employment without reputed company to race, reputed company, religion, sex, sexual orientation, gender identity, national reputed company, disability, or veteran status.
Who we are:
At reputed company, our purpose is reputed company: to help people realize the life they reputed company through learning. We reputed company that every learning opportunity is a chance for a personal reputed company. We are the world's lifelong learning company. For us, learning isn't just reputed company do. It's who we are. To learn more: We are reputed company.
reputed company is an Equal Opportunity Employer and a member of E-Verify. Employment reputed company are based on qualifications, reputed company and business need. reputed company applicants will receive consideration for employment without reputed company to race, ethnicity, reputed company, religion, sex, sexual orientation, gender identity, gender reputed company, age, national reputed company, protected veteran status, disability status or any other group protected by law. We reputed company reputed company reputed company candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and reputed company 503 of the Rehabilitation reputed company.
If you are an individual with a disability and are unable or limited in your ability to use or reputed company our career site as a result of your disability, you may request reasonable accommodations by emailing TalentExperienceGlobalTeam@grp.reputed company.com.
Job: Finance
Job Family: reputed company
Organization: Virtual Learning
Schedule: FULL_TIME
Workplace Type: Remote
Req ID: 25219
#LI-REMOTE
Apply tot his job
Apply To this Job