*This is a fully remote position and is only available for people located in LATAM*

Insight Assurance is a global audit firm on a mission to transform how organizations achieve cybersecurity and compliance. Founded by former Big 4 (EY) professionals, we deliver next-generation audit services across SOC 2, ISO 27001, PCI DSS (QSA), HITRUST, CMMC (C3PAO), and FedRAMP (3PAO) frameworks. 
 
We’re not your traditional audit firm — we’re tech-enabled, leveraging compliance automation and advanced collaboration tools to make audits faster, smarter, and more impactful for our clients. 
 
Recognized on the Inc. 5000 and Fast 50 lists, Insight Assurance is one of the fastest-growing global audit firms, with 170+ professionals supporting nearly 2,000 clients across the Americas, EMEA, and APAC. 
 

JOB PURPOSE

The role of Staff or Experienced IT Auditor includes the execution of client engagements and internal activities related to SOC 1, SOC 2, and SOC 3 examinations, HIPAA assessments, and external audits of other security and privacy frameworks/standards.

DUTIES AND RESPONSIBILITIES

• Perform the day-to-day activities of IT audit engagements (SOC 1, SOC 2, HIPAA), and readiness assessments under the direction of a member of the management team.
• Evaluate the design and effectiveness of technology controls
• Identifies and communicates IT audit findings to management
• Help identify performance improvement opportunities for assigned clients
• Communicate effectively with the clients and team members
• Lead client meetings and foster client relationships through proactive communication
• Provide weekly status reports to management
• Proactively communicate to management regarding any potential issues

SKILLS

• Excellent oral and written communication skills in English.
• Ability to work individually as well as collaboratively.
• A high degree of motivation.
• Spanish is a plus.

EDUCATION

Bachelor’s degree in accounting, business, cybersecurity, or management information systems.

EXPERIENCE

• At least 1 year of experience performing IT audit engagements at a Big 4 or other audit/consulting firm.
• Experience using GRC and compliance automation tools (Vanta, Drata, Secureframe) is a plus.

TRAINING AND CERTIFICATIONS

Candidates with an active or working towards CISA, CPA, CISSP, ISO27001 Lead Auditor, or PCI QSA certification.

BENEFITS

• Flexible Paid Time Off and paid holidays
• Performance Bonuses
• 100% Remote

Privacy Notice CCPA: 

• Insight Assurance shares your personal data/information with Greenhouse recruiting because this is the tool we use for the recruitment process.
• Insight Assurance does not sell personal data/information under any circumstances.
• You may exercise your rights under personal data protection legislation by reaching out to us via: HR@insightassurance.com or submit a request via mail at 400 N Tampa St. 15th Floor Suite 122, Tampa, FL 33602

Privacy Notice GDPR:

This notice informs you about the categories of Personal Data/ Information and the Purpose and Scope of Processing Activities to be undertaken by Insight Assurance (we, us, our), under its job application and recruitment process.

We resort to Greenhouse.com as the platform that supports our recruitment process, and therefore your Personal Data/ Information will be Processed on this tool (hosted, shared with, cross-referenced, accessed by our team); we have in place contractual terms and the commitment of Greenhouse.com that ensures the Security and Confidentiality plus Purpose limitation with regards to the Processing of your Personal Data.

When you reply to one of your job postings, you voluntarily and freely submit your Personal Data to us; this, allied with the fact that the Processing by us (and over Greenhouse.com) of that Personal Data has the sole Purpose of validating your application and proceeding with the inherent scrutiny and decision, allows us to argue having Legitimate Interest as the applicable Legal Basis to undertake the Processing of your Personal Data under this scope.

We are a U.S. based company, hence some or all Personal Data pertaining to you will be hosted in the U.S.

The categories of Personal Data under Processing consist of:

• Identification
• Contact
• Education and Professional
• Interview performance
• Evaluation

You may exercise several Rights as determined under applicable Personal Data Protection legislation, in short:

• Right of Access – meaning getting information about the Personal Data under Processing by us, except for the information you already know;
• Right of Erasure – you may ask for us to erase all Personal Data pertaining to you under Processing; this may imply you being excluded from the recruitment process, for without information we cannot proceed with it;
• Right of Opposition or Restriction of Processing – you may ask us to stop some Processing or restrict the Processing of some Personal Data, this may imply you being excluded from the recruitment process, at our sole discretion also for without information we cannot proceed with it;
• Rectification – you can rectify your Personal Data at anytime 

NEORIS is a Digital accelerator that helps companies enter the future, having 20 years of experience as Digital Partners of some of the largest companies in the world. We have more than 4,000 professionals in 11 countries, with our multicultural startup culture where we cultivate innovation, continuous learning to create high-value solutions for our clients.

We are looking for a Senior Security Architect (Clowd & AWS) to lead the closure of AWS cybersecurity remediation tickets and subsequently operating as the account's permanent security lead for ongoing operations and cloud security governance.

The profile will own the security posture of a multi-account AWS environment, coordinate with global cybersecurity team, and ensure that all controls remain audit-ready on an ongoing basis.

Required Profile:

• 10+ years of professional experience in cybersecurity, cloud security, or information security roles
• Minimum 5 years of hands-on experience with AWS security services (GuardDuty, Security Hub, IAM, Secrets Manager, Inspector, CloudTrail, AWS Config)
• Demonstrated experience leading security remediation projects in regulated environments (banking, healthcare, or FMCG preferred)
• Experience working with audit frameworks and generating audit evidence packages (ISO 27001, SOC 2, or equivalent)
• Prior experience in client-embedded or staff augmentation roles is a strong plus

Technical Skills — Required

• AWS: IAM, GuardDuty, Security Hub, Inspector, CloudTrail, Secrets Manager, AWS Config, AWS Backup, Transfer Family
• EC2 and Elastic Beanstalk: platform management, Amazon Linux migration, patch management
• Encryption: KMS, RDS encryption at rest, S3 server-side encryption, certificate management
• Network security: Security Groups, NACLs, VPC architecture, WAF, NLB/ALB security
• Identity: SSO (AWS IAM Identity Center), MFA enforcement, privilege management (PAM)
• Threat frameworks: MITRE ATT&CK, STRIDE, NIST CSF, Zero Trust principles
• Security monitoring: SIEM integration (Splunk preferred), log aggregation, alert triage

Technical Skills — Desirable

• Qualys or equivalent vulnerability management tooling
• Endpoint Detection and Response (EDR/XDR) platforms
• IaC security scanning (Checkov, tfsec, or equivalent)
• DevSecOps practices: pipeline security gates, SAST/DAST integration
• Multi-cloud exposure (GCP or Azure) as secondary environment
• Advanced Level of English

Soft Skills & Mindset

• Autonomous and structured — able to manage multiple work streams without day-to-day supervision
• Strong written and verbal communication in English (minimum B2), with experience in weekly client-facing reporting.
• Comfortable operating in ambiguous, fast-paced environments with competing priorities
• Security-first mindset: able to say no and explain why, without blocking business delivery
• Collaborative: works effectively with infrastructure engineers, DevOps teams, and client-side stakeholders

Education

• Bachelor's degree in Systems Engineering, Computer Science, or related field — required
• Master's degree or postgraduate specialization in Cybersecurity — strongly preferred

Certifications — Required (at least one)

• AWS Certified Security – Specialty
• AWS Certified Solutions Architect – Professional
• CISSP (Certified Information Systems Security Professional)

Certifications — Desirable

• ISO 27001 Lead Implementer or Lead Auditor
• CISM (Certified Information Security Manager)
• CompTIA Security+ or equivalent baseline
• CEH, OSCP, or offensive security certifications

We offer:

• Statutory & Major benefits
• Personal Growth
• Competitive salary
• Attractive benefits plan

Come and meet us on: http://www.neoris.com, on Facebook, LinkedIn, Twitter, or Instagram @NEORIS.

Marina Molina

LI-MM3