GRC – ITGC(General Control) SME

Cybersecurity Audit & Compliance Specialist

About The Role

As a Cybersecurity Audit & Compliance Specialist you will make an impact by supporting global cybersecurity audit compliance certification and governance initiatives across the organization. You will be a valued member of the Cybersecurity and Risk Management team and work collaboratively with Information Security Legal Vendor Management IT Internal Audit and business stakeholders to ensure compliance with industry standards regulatory requirements and corporate security policies. In this role you will help strengthen the organization's security posture through audit readiness certification management compliance monitoring and continuous improvement initiatives while supporting global information security frameworks and standards. In This Role You Will Support cybersecurity audit and compliance initiatives including ISO 27001 certification ENS certification and other global information security standards and regulatory requirements. Prepare the organization for internal and external security audits by coordinating audit activities tracking deliverables and ensuring timely completion of remediation efforts. Partner with cross-functional teams external auditors advisors and vendors to collect validate organize and present audit evidence and compliance documentation. Conduct compliance reviews gap assessments and remediation tracking to identify and address deficiencies against applicable security frameworks and policies. Review information security requirements within vendor and customer contracts and provide guidance to ensure alignment with corporate cybersecurity standards and controls. Work Model We strive to provide flexibility wherever possible. Based on this role's business requirements this is a remote position open to qualified applicants in the United States . Regardless of your working arrangement we are here to support a healthy work-life balance through our various wellbeing programs. The working arrangements for this role are accurate as of the date of posting. This may change based on the project you're engaged in as well as business and client requirements. Rest assured we will always be clear about role expectations. What You Need to Have to Be Considered Bachelor's degree in Cybersecurity Information Technology Information Systems Business Administration Risk Management or a related field or equivalent professional experience. Experience supporting cybersecurity audits compliance programs regulatory assessments or certification initiatives. Knowledge of ISO 27001 requirements controls risk management principles and certification processes. Experience conducting compliance assessments gap analyses evidence collection and remediation tracking activities. Strong understanding of information security governance policies standards and audit methodologies. Experience managing audit documentation compliance records and evidence repositories. Ability to coordinate multiple projects and compliance initiatives while meeting deadlines. Strong stakeholder management skills with experience collaborating across technical and business teams. Excellent written and verbal communication skills with exceptional attention to detail. Strong analytical organizational and problem-solving abilities. These Will Help You Stand Out Experience supporting ISO 27001 certification or recertification efforts. Knowledge of ENS (Esquema Nacional de Seguridad) requirements and other global cybersecurity compliance frameworks. Experience working with third-party risk management vendor security reviews and contract security assessments. Familiarity with NIST Cybersecurity Framework SOC 2 CIS Controls GDPR or other regulatory and security frameworks. Experience managing corrective action plans and compliance remediation programs. Professional certifications such as CISA CRISC CISM ISO 27001 Lead Implementer ISO 27001 Lead Auditor or similar credentials. Knowledge of cybersecurity risk assessments security governance and control testing methodologies. Experience supporting global audit and compliance programs within large enterprise environments. We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role. Salary And Other

Compensation

The annual salary for this position is anticipated to be between $95000 and $135000 depending on experience qualifications geographic location skills and other job-related factors. This position is also eligible for Cognizant's discretionary annual incentive program based on performance and subject to the terms of Cognizant's applicable plans.

Benefits

Cognizant offers a comprehensive and competitive benefits package designed to support the health wellbeing and financial security of our associates and their families including Medical dental and vision insurance Health Savings Account (HSA) and Flexible Spending Accounts (FSA) where applicable Company-paid life insurance and disability coverage 401(k) retirement savings plan with company contributions subject to plan provisions Paid time off company holidays and leave programs Employee Assistance Program (EAP) Wellbeing and mental health resources Professional development training and certification opportunities Career growth and internal mobility programs Associate recognition and reward programs

Benefits

may vary by location and employment status and are subject to change. Application Deadline Applications will be accepted until September 30 2026 . Cognizant reserves the right to close this posting earlier based on application volume business needs or hiring timelines.