About the Role 

As a Staff Consultant at A-LIGN, you’ll begin your career in IT audit by gaining a deep understanding of how businesses operate from the inside out. You’ll learn the language of business and develop a strong foundation in internal controls and audit principles. In this role, you’ll serve as a trusted partner to clients, leaving a lasting impression through collaboration and meaningful connections. You’ll build technical expertise in IT audit while strengthening your professional network and relationship-building skills by working alongside high-performing teams. This position offers a launchpad for a long-term career in audit, supported by hands-on experience, coaching, and mentorship. Your journey begins with A-LIGN University, our comprehensive training program designed to prepare you for success. Over the course of several months, you’ll engage in classroom learning, on-the-job shadowing, and personalized coaching. A-LIGN University equips you with the tools, knowledge, and confidence to thrive in your role and grow within the organization and the industry. . 

Reports to

Managing Consultant 

Pay Classification

Full-Time

Responsibilities 

• Support the execution of HITRUST assessments and related IT compliance engagements under the guidance of engagement managers and senior consultants
• Assist with planning and performing testing activities during remote or on-site assessments
• Participate in scoping discussions to understand client environments, systems, and audit boundaries
• Gather and analyze client information to evaluate internal controls and document assessment results
• Maintain accurate workpapers and documentation in accordance with A-LIGN standards
• Communicate professionally with clients to request information, clarify requirements, and provide updates
• Collaborate closely with team members to ensure engagements are completed efficiently and on time
• Participate in training, coaching, and feedback sessions to continuously develop technical and professional skills
• Support a culture of learning, quality, and continuous improvement 

Minimum Qualifications 

EDUCATION 

• Bachelor’s degree in Information Security, Information Systems, Information Technology, Computer Science, or a related discipline 
• Other relevant degrees may be considered 

EXPERIENCE 

• Coursework or academic exposure to IT, cybersecurity, risk management, auditing, or compliance concepts 
• Internship, project work, or academic experience related to IT audit, information security, or compliance is a plus 

CERTIFICATIONS  

• Strong interest in pursuing industry certifications such as HITRUST CCSFP, CISA, CISSP, or similar credential

SKILLS 

• Strong attention to detail with the ability to meet deadlines 
• Ability to thrive in a collaborative, fast-paced environment  
• Eagerness to learn new technologies, frameworks, and job-specific skills 
• Ability to work both independently and as part of a team  
• High level of motivation and professionalism 

Benefits

• Employer Paid Life & Health Insurance
• Competitive Bonus Structure
• Home Office Reimbursement
• Technology Allowance
• Certification Reimbursement
• BeneficiaT Discount Loyalty Program
• Personalized Career Coaching
• Generous Paid Time Off
• Paid Office Closure December 25-January 1
• Summer Hours

About A-LIGN 

A-LIGN is the leading provider of high-quality, efficient cybersecurity compliance programs. Combining experienced auditors and audit management technology, A-LIGN provides the widest breadth and depth of services including SOC 2, ISO 27001, HITRUST, FedRAMP, and PCI. A-LIGN is the number one issuer of SOC 2 and HITRUST and a top three FedRAMP assessor. To learn more, visit a-lign.com. 

Come Work for A-LIGN! 

Apply online today at A-LIGN.com and learn about life at A-LIGN by following us on LinkedIn.  

A-LIGN is an Equal Opportunity Employer.

About the Role

The GRC analyst helps maintain A-LIGN’s management system as it relates to information security standards. In this role, you will be responsible for the coordination, maintenance, and improvement of A-LIGN’s corporate compliance program, including internal and external audits.

Reports to

Director of Compliance and Program Management

Pay Classification

Full-Time

Responsibilities 

• Support information security compliance programs across applicable frameworks, including SOC 2, ISO 27001, ISO 42001, FedRAMP, CMMC, and NIST 800-53/171
• Coordinate audit, assessment and testing activities with internal and external stakeholders
• Validate identified findings and nonconformities, manage remediation tracking, monitor resolution progress, and report status to stakeholders
• Review, update, and maintain information security documentation in accordance with applicable standards and organizational objectives
• Maintain and update the GRC platform (Optro) current with risk, control, and compliance data
• Assist with the implementation and ongoing management of data loss prevention (DLP) programs, including false positive identification, policy violations, incident monitoring and response coordination
• Support third-party risk management activities, including contractor oversight and vendor due diligence reviews
• Assist with client-issued security questionnaires and assessments
• Assist with risk management, vulnerability management, incident reviews, data disposal reviews, and BC/DR planning and testing
• Monitor and track employee completion of security training and awareness programs

Minimum Qualifications

EDUCATION

• Bachelor’s degree in management information systems, Information Security, Cybersecurity, Business or a related field or an equivalent combination of education and experience

EXPERIENCE

• At least 1 year of IT security, governance, risk, or compliance-related experience
• Knowledge of security and risk frameworks
  • Preferred knowledge of SOC 2, ISO 27001, ISO 42001, FedRAMP, CMMC, NIST 800-53, NIST 800-171
• Preferred: Knowledge of GRC tools (Optro, OneTrust, etc.)

CERTIFICATIONS         

• Preferred: CISA, CISM, Security+, CCSK, ISO Lead Auditor

SKILLS

• Ability to meet deadlines with a high degree of motivation
• Excellent critical thinking and problem-solving skills
• Strong communication and organizational skills
• Thrives in a fast-paced environment
• Ability to work individually as well as collaboratively

Benefits

• Employer Paid Life & Health Insurance
• Competitive Bonus Structure
• Home Office Reimbursement
• Technology Allowance
• Certification Reimbursement
• BeneficiaT Discount Loyalty Program
• Personalized Career Coaching
• Generous Paid Time Off
• Paid Office Closure December 25-January 1
• Summer Hours

About A-LIGN 

A-LIGN is the leading provider of high-quality, efficient cybersecurity compliance programs. Combining experienced auditors and audit management technology, A-LIGN provides the widest breadth and depth of services including SOC 2, ISO 27001, HITRUST, FedRAMP, and PCI. A-LIGN is the number one issuer of SOC 2 and HITRUST and a top three FedRAMP assessor. To learn more, visit a-lign.com. 

Come Work for A-LIGN! 

Apply online today at A-LIGN.com and learn about life at A-LIGN by following us on LinkedIn.  

A-LIGN is an Equal Opportunity Employer. 

About the Role

The GRC analyst helps maintain A-LIGN’s management system as it relates to information security standards. In this role, you will be responsible for the coordination, maintenance, and improvement of A-LIGN’s corporate compliance program, including internal and external audits.

Reports to

Director of Compliance and Program Management

Pay Classification

Full-Time

Responsibilities 

• Support information security compliance programs across applicable frameworks, including SOC 2, ISO 27001, ISO 42001, FedRAMP, CMMC, and NIST 800-53/171
• Coordinate audit, assessment and testing activities with internal and external stakeholders
• Validate identified findings and nonconformities, manage remediation tracking, monitor resolution progress, and report status to stakeholders
• Review, update, and maintain information security documentation in accordance with applicable standards and organizational objectives
• Maintain and update the GRC platform (Optro) current with risk, control, and compliance data
• Assist with the implementation and ongoing management of data loss prevention (DLP) programs, including false positive identification, policy violations, incident monitoring and response coordination
• Support third-party risk management activities, including contractor oversight and vendor due diligence reviews
• Assist with client-issued security questionnaires and assessments
• Assist with risk management, vulnerability management, incident reviews, data disposal reviews, and BC/DR planning and testing
• Monitor and track employee completion of security training and awareness programs

Minimum Qualifications

EDUCATION

• Bachelor’s degree in management information systems, Information Security, Cybersecurity, Business or a related field or an equivalent combination of education and experience

EXPERIENCE

• At least 1 year of IT security, governance, risk, or compliance-related experience
• Knowledge of security and risk frameworks
  • Preferred knowledge of SOC 2, ISO 27001, ISO 42001, FedRAMP, CMMC, NIST 800-53, NIST 800-171
• Preferred: Knowledge of GRC tools (Optro, OneTrust, etc.)

CERTIFICATIONS         

• Preferred: CISA, CISM, Security+, CCSK, ISO Lead Auditor

SKILLS

• Ability to meet deadlines with a high degree of motivation
• Excellent critical thinking and problem-solving skills
• Strong communication and organizational skills
• Thrives in a fast-paced environment
• Ability to work individually as well as collaboratively

Benefits

• Healthcare, Dental, and Vision Benefits
• EAP - Employee Assistance Program
• Competitive Bonus Structure
• Home Office Reimbursement
• Technology Allowance
• Certification Reimbursement
• Public Transportation Card
• Multisport Card
• Personalized Career Coaching
• Generous Paid Time Off
• Paid Office Closure December 24-January 1
• Summer Hours

About A-LIGN 

A-LIGN is the leading provider of high-quality, efficient cybersecurity compliance programs. Combining experienced auditors and audit management technology, A-LIGN provides the widest breadth and depth of services including SOC 2, ISO 27001, HITRUST, FedRAMP, and PCI. A-LIGN is the number one issuer of SOC 2 and HITRUST and a top three FedRAMP assessor. To learn more, visit a-lign.com. 

Come Work for A-LIGN! 

Apply online today at A-LIGN.com and learn about life at A-LIGN by following us on LinkedIn.  

A-LIGN is an Equal Opportunity Employer. 

The personal data you provide to us is processed by A-LIGN Bulgaria. Your personal data is shared with employees of A-LIGN, and the candidate data retention period is 6 months. You have the right to obtain information about the processing of your personal data. In addition, you have the right to correct, to block, and to delete your data in accordance with the local laws and regulations. For more information you can visit A-LIGN’s Job Ads Privacy Policy.

About the Role

As a PCI Senior Consultant (QSA), your responsibilities will include leading project execution and client service activities, focused primarily on PCI DSS assessments. You will lead the client engagement and be the face of A-LIGN with our customers.

You will have the opportunity to gain a variety of project experience with high profile clients, across various industries. Our Senior Consultants will also have the ability to move into a Mentor role that will allow them to mentor and train Associate QSA's.  Associate QSA's will be lead by a Senior QSA on all assigned engagements.

Reports to

Managing Consultant

Pay Classification

Indefinite Contract

Responsibilities

• Lead and execute PCI DSS assessments in coordination with the project's manager
• Create agendas 
• Lead client meetings and maintain client relationships 
• Perform audit testing and mentor Associate QSA's (AQSA's) performing assigned audit review tasks
• Communicate effectively to the client, prior to, during, and post on-site visit 
• Review manager’s planning notes, and prepare as appropriate for meetings 
• Prepare fieldwork notes throughout the project 
• Gather evidence and review 
• Provide draft reports to management, within defined timelines and mentor and train Associate QSA's (AQSA's) to help them develop report writing skills 
• Provide detailed project status reports weekly to management 
• Organize client information on A-LIGN’s OneDrive folder
• Communicate to management about any potential project issues 
• Provide feedback to junior consultants and management team 
• Travel occasionally to clients’ offices

Minimum Qualifications

EDUCATION 

• Bachelor’s degree in Information Technology, or other relevant field required

EXPERIENCE 

• At least 3 years of experience working in a lead QSA role
• Prior hands-on Information Technology and/or Information Security experience, also preferred

CERTIFICATIONS  

• Currently possesses a QSA certification required
• Additional certifications such as CISA, CISSP, CISM preferred

SKILLS 

• Ability to meet deadlines with a high degree of motivation
• Excellent communication skills
• Thrives in a fast-paced environment
• Ability to work individually as well as collaboratively

About A-LIGN

A-LIGN is the leading provider of high-quality, efficient cybersecurity compliance programs. Combining experienced auditors and audit management technology, A-LIGN provides the widest breadth and depth of services including SOC 2, ISO 27001, HITRUST, FedRAMP, and PCI. A-LIGN is the number one issuer of SOC 2 and HITRUST and a top three FedRAMP assessor. To learn more, visit a-lign.com

Come Work for A-LIGN!

Apply online today at A-LIGN.com and learn about life at A-LIGN by following us on LinkedIn.

A-LIGN is an Equal Opportunity Employer.