Information Security Compliance Auditor - Mid
External
Nord-security · Vilnius, LithuaniaPrepare for this interview
EliteAI-generated questions, company research, and talking points tailored to this role
About the role
As an Information Security Compliance Auditor, you will play a key role in strengthening our security and compliance posture. You will lead internal audits across multiple regulatory and industry frameworks, helping ensure that security controls are effectively designed, implemented, and operating as intended. Working closely with stakeholders across Engineering, Infrastructure, Product, Legal, and Security teams, you will assess compliance readiness, identify improvement opportunities, and support continuous enhancement of our governance, risk, and compliance programs. Main Responsibilities Plan, execute, and report on internal audits against security and compliance frameworks, including ISO 27001, ISO 42001, SOC 2, HIPAA, PCI DSS, and other applicable standards. Evaluate the design and effectiveness of security controls, policies, processes, and operational practices. Prepare detailed audit reports, document findings, assess risks, and provide practical remediation recommendations. Track audit findings and corrective action plans, ensuring timely resolution and evidence collection. Support control owners in understanding compliance requirements and implementing sustainable solutions. Monitor changes in regulatory and industry requirements and assess their impact on the organization. Contribute to the development and continuous improvement of internal audit methodologies, compliance programs, and control frameworks. Assist teams in preparing for external audits, certifications, and customer security assessments. Promote a culture of security, compliance, and continuous improvement across the organization. Core Requirements Previous experience in internal audit, compliance, governance, risk management, or information security. Good understanding of information security principles and common control frameworks. Familiarity with one or more compliance standards such as ISO 27001, SOC 2, HIPAA, PCI DSS, NIST CSF, or similar. Business-first mindset, with the ability to act as a trusted enabler rather than an enforcer, providing pragmatic, risk-based guidance that supports the business in achieving compliant and sustainable growth. Strong analytical skills and attention to detail. Excellent communication and stakeholder management skills. Ability to interpret requirements and translate them into practical control expectations. Capability to work independently while effectively collaborating with cross-functional teams. Strong organizational skills and ability to manage multiple audit engagements simultaneously. Curiosity and willingness to learn technical concepts and security processes when required.
Requirements
- Experience participating in certification or attestation audits.
- Professional certifications such as ISO 27001 Lead Auditor, CISA, CRISC, CISSP, or similar.
- Experience working in SaaS, cybersecurity, fintech, or highly regulated industries.
- What You'll Achieve
- Improve the effectiveness and maturity of our compliance and control environment.
- Help maintain trust with customers, partners, and regulators.
- Drive continuous improvement across security, governance, and risk management processes.
- Influence security and compliance practices across a fast-growing technology organization
Benefits
Additional Information
At Nord Security, we're creating a safer cyber future. We help people and businesses take back control of their online security, privacy, and data. From VPNs to password managers, threat intelligence to eSIMs for travel-our teams turn complex problems into solutions trusted by millions worldwide. Life is online. In this role, you'll help people own it.
Your Match
How well this role fits your profile.
Company Intel
What employees say
Worked at nord-security? Share your experience