Search 3,131 Remote CISA Jobs

Executive Advisor - Governance, Risk & Compliance

Remote Canada

About Malleum - Malleum is at the forefront of next-generation cyber defense partnering with marquee clients across space aerospace defense government financial services and critical infrastructure. We're experiencing exceptional growth as demand accelerates for trusted advisors capable of delivering at the intersection of national security allied intelligence cooperation and enterprise resilience. Our advisors shape the governance risk and compliance programs that underpin cutting-edge defensive technologies sovereign space capabilities and allied programs with national security impact – from satellite and launch operations to next-generation defense platforms. If you take pride in shaping how the most consequential organizations govern cyber risk and want your counsel to influence sovereign and allied missions Malleum is where your leadership meets purpose.The Opportunity - We're seeking a very senior governance risk and compliance specialist to lead our most strategic GRC engagements and to help scale our advisory practice across the space aerospace and defense sectors. In this role you'll serve as a trusted counsel to CISOs CIOs CROs and boards – translating regulatory complexity into pragmatic mission-aligned programs. This is a remote position with travel to client sites – typically Ontario-based – as required. This is a senior leadership role for a recognized GRC practitioner who has stood up enterprise-grade cyber resilience programs navigated the most demanding compliance regimes and can mentor the next generation of Malleum advisors.What You'll Do Lead executive-level GRC advisory engagements for clients across space aerospace defense government and critical infrastructure Stand up and mature Cyber Resilience Programs at large enterprises integrating governance risk management business continuity third-party risk and incident readiness into a cohesive operating model Advise C-suite and board stakeholders on cyber risk posture regulatory exposure and strategic investment priorities Lead client journeys to CMMC (Cybersecurity Maturity Model Certification) readiness and certification including scoping gap assessments SSP/POAM development and assessor coordination Lead client adoption of the Canadian Program for Cyber Security Certification (CPCSC) for organizations supporting the Government of Canada defense supply chain Develop operationalize and audit programs aligned with NIST CSF 2.0 NIST 800-53/171 ISO 27001/27005 ITSG-33 SOC 2 and sector-specific frameworks Advise space-sector clients on emerging requirements such as Space ISAC guidance NIST IR 8401 (Satellite Ground Segment) and allied space defense expectations Define and implement enterprise risk management frameworks KRIs/KPIs risk appetite statements and board reporting cadences Lead third-party / supply-chain risk programs aligned with defense industrial base (DIB) and allied requirements Shape Malleum's GRC service offerings methodologies accelerators and intellectual property Mentor and develop senior managers managers and consultants — building bench strength and a strong delivery culture Drive business development trusted-advisor relationships account growth proposals and thought leadership across the space aerospace and defense ecosystem Represent Malleum in industry forums regulator engagements client briefings and executive roundtables What You Bring 15+ years of progressive cybersecurity and GRC experience including senior leadership roles in consulting industry or government Demonstrated track record standing up and scaling Cyber Resilience Programs for large complex enterprises — including governance structures risk frameworks control libraries metrics and operating cadences Deep expertise across CMMC (Levels 1–3) and emerging CPCSC requirements including how each maps to NIST 800-171 / 800-172 and supplier obligations Hands-on experience advising clients in space aerospace and defense — familiarity with ITAR CGP controlled goods export controls and allied compliance regimes Strong command of NIST CSF 2.0 NIST 800-53/171/172 ISO 27001/27005 ITSG-33 SOC 2 PCI DSS and relevant privacy regimes (PIPEDA Quebec Law 25 GDPR) Executive presence — proven ability to advise CISOs CIOs CFOs GCs audit committees and boards Strong commercial acumen — practice building account growth proposal leadership and revenue accountability Demonstrated leadership in mentoring coaching and developing high-performing GRC teams Certifications such as CISSP CISM CRISC CGEIT CISA ISO 27001 Lead Auditor/Implementer or CMMC Registered Practitioner (RP) strongly preferred Eligibility for Government of Canada security clearance (Secret or higher) existing clearance highly valued French fluency is an asset Bachelor's degree required advanced degree (MBA MS in Cybersecurity) preferred Why Malleum - Lead GRC programs with genuine national and allied security impact across space aerospace and defense Shape the strategy and growth of a rapidly scaling advisory practice with direct partner-level visibility Work alongside seasoned IR offensive security engineering and program leaders on the most consequential client missions Highly competitive executive compensation performance incentives and equity-style participation in practice growth Continuous learning budget certification sponsorship and a platform to publish speak and shape industry dialogue A flat high-trust culture that rewards judgment ownership and mission focus Malleum is an equal opportunity employer. We welcome applications from all qualified candidates and are committed to building a team that reflects the communities and missions we serve. We are committed to providing accommodations for individuals with disabilities throughout the recruitment process. Please let us know if you require accommodation at any stage. Gm1VJfwdua

Business Analyst (Secure Enterprise IT Modernization)

"Xcelerate Solutions seeks a Business Analyst (BA) to play a critical role in the modernization development enhancement and maintenance of our secure enterprise IT platform. Operating under established performance work standards the successful candidate will serve as the primary liaison between business stakeholders mission owners and the technical software development team. This position requires an analytical professional who can translate complex business needs and user requirements into clear actionable technical specifications. The candidate will work closely within an Agile/Scrum environment ensuring that the software solutions delivered align with strategic objectives user expectations and compliance frameworks. Come join our award-winning organization and work with some of the most talented and brightest minds in the GovCon industry. Location Remote Key Responsibilities In accordance with program performance standards the Business Analyst will perform the following duties Requirements Engineering & Backlog Management Collaborate with stakeholders to gather analyze and document business functional and technical requirements. Translate high-level business goals into detailed Epic descriptions User Stories and clear measurable Acceptance Criteria using Agile tools (e.g. Jira Azure DevOps). Facilitate backlog grooming story mapping and prioritization sessions with Product Owners and development teams. Ensure all requirements are fully mapped to system capabilities technical constraints and quality assurance test cases. Stakeholder Engagement & Collaboration Act as a key interface and trusted advisor between non-technical stakeholders and the engineering team to clarify functional objectives. Conduct interviews workshops and focus groups to elicit requirements and understand business workflows. Prepare and deliver presentations live system demonstrations and walk-throughs of system capabilities to diverse audiences. System Analysis & Process Modeling Analyze existing business processes (""as-is"") and design optimized modernized workflows (""to-be""). Create system diagrams process flows data models and use-case scenarios to guide development and architectural decisions. Identify gaps risks and bottleneck areas in existing workflows and propose technical or operational solutions. Software Quality Assurance & Compliance Support User Acceptance Testing (UAT) by drafting test scenarios coordinating testing sessions with end-users and validating that delivered features meet defined acceptance criteria. Ensure that functional requirements respect accessibility benchmarks (Section 508 / WCAG compliance) and cybersecurity protocols. Maintain comprehensive system documentation including user manuals release notes training materials and standard operating procedures (SOPs). Required Qualifications Education Bachelor’s degree in Business Administration Information Systems Computer Science or a related field (equivalent professional experience may be considered). Experience + Minimum of 5+ years of professional experience as a Business Analyst or Systems Analyst in an enterprise software development environment. + 3+ years of experience working within an Agile (Scrum/Kanban) framework. Technical & Analytical Skills + Proficient in Agile project management and collaboration tools specifically Jira and Confluence (or Azure DevOps equivalents). + Strong expertise in business process mapping modeling and diagramming tools (e.g. Microsoft Visio Lucidchart Miro). + Basic familiarity with SQL to query databases for data analysis validation and reporting. Soft Skills + Exceptional written and verbal communication skills with a proven ability to bridge the gap between technical developers and non-technical stakeholders. + Strong negotiation facilitation and conflict-resolution skills. Preferred Qualifications Professional certifications in business analysis or agile frameworks (e.g. Certified Business Analysis Professional (CBAP) PMI-PBA Certified Scrum Master (CSM) or Certified Scrum Product Owner (CSPO)). Experience working on federal IT projects defense systems or large-scale legacy modernization initiatives. Familiarity with user experience (UX) principles wireframing tools (e.g. Figma Balsamiq) and Section 508 accessibility standards. Experience utilizing reporting or business intelligence tools (e.g. Power BI Tableau). Certifications To support compliance and operational standards within our secure environment candidates must meet the following baseline requirements Cybersecurity Baseline Certification (Preferred) An active DoD 8570.01-M / DoD 8140 baseline certification (or higher) is highly preferred to facilitate direct system and network access. Acceptable certifications include CompTIA Security+ CE Systems Security Certified Practitioner (SSCP) Certified Information Systems Auditor (CISA) Professional Certifications (Preferred but not required) Certified Business Analysis Professional (CBAP) or PMI Professional in Business Analysis (PMI-PBA) Certified Scrum Master (CSM) or Professional Scrum Master (PSM I) Security & Clearance Requirements Due to the secure nature of the enterprise environment and associated federal mandates Work Status Allowable U.S. citizenship Minimum Clearance to Start Public Trust or Favorably Adjudicated Secret Clearance Compliance Must strictly adhere to government cybersecurity policies operations security (OPSEC) requirements and system access regulations. About Xcelerate Solutions Founded in 2009 and headquartered in McLean VA Xcelerate Solutions (www.xceleratesolutions.com) is one of America's fastest-growing companies. Xcelerate’s culture is defined by our diversified workforce of dynamic and versatile professionals supported with growth and development opportunities that contribute to individual and company growth. This strong commitment to our employees has been recognized by our inclusion on the Washington Business Journal’s “50 Best Places to Work” list as well as being a “Great Place to Work” certified company with a 4.6 star and a 99% CEO approval Glassdoor rating. Come find out why Xcelerate Solutions is one of the top DC Metro employers! Xcelerate Solutions is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race color national origin religion age equal pay disability veteran status sex sexual orientation gender identity genetic information or expression of another protected characteristic. As part of this commitment to the full inclusion of all qualified individuals Xcelerate Solutions provides reasonable accommodation if needed because of an applicant's or an employee's disability. Pay Transparency Notice Xcelerate Solutions will not discharge or in any other manner discriminate against employees or applicants because they have inquired about discussed or disclosed their own pay or the pay of another employee or applicant."

IT Security Analyst II

Careers at IT Security Analyst II VC3 an innovative and growing IT services solution provider headquartered in Columbia SC is seeking to fill a Senior Cybersecurity Analyst role. They will be responsible for helping organizations to protect their infrastructure data people and customers and will work with the existing management and technical teams to be successful. Our People Our team members are collaborative positive and dedicated to mutual success. Transparency isn't just a buzzword here it's a commitment to open communication ensuring every voice is heard and valued. Guided by our core values — Passionately Curious Own It Go Beyond and Serve as One — we’re here to create something extraordinary together. Our Core Focus Our team members play a pivotal role in our focus Serving those who serve with technologies for today and tomorrow that make life safe and simple. With nearly 30 years of specialized expertise our team goes beyond conventional boundaries delivering tailored managed services and cybersecurity solutions to our clients. Your Growth We are a growth minded organization that prioritizes development offering numerous opportunities for career advancement. Rooted in our core value of being Passionately Curious VC3 offers a dynamic learning environment emphasizing hands-on experiences and formal development programs that celebrate continuous learning to propel your career forward. Department Technology Operations Employment Type Full Time Location Canada - Remote Workplace type Fully remote Key Responsibilities Understand and follow “The VC3 Way”. This is our set of standards and processes that produce a predictable result for the client. You must be aware of and maintain our standards Translate complex Cyber Security concepts into actionable insights for clients ensuring alignment with their business priorities and enhancing their understanding of strategic security decisions. Oversee and prioritize security event monitoring and incident response queues ensuring swift and accurate triage to meet or exceed established SLAs/objectives. Develop and implement strategies to streamline incident response processes and improve resolution times. Conduct comprehensive analysis of system security and application logs to diagnose intricate faults identify subtle abnormal behaviors and refine false positive reduction techniques. Leverage advanced tools and techniques for sophisticated threat detection and analysis. Utilize and optimize a broad range of VC3 and client toolsets including advanced End Detection and Response (EDR) tools for in-depth investigation of alerts anomalies and building accurate timelines related to potential security compromises. Formulate and execute strategic approaches for investigating escalating containing and eradicating sophisticated malicious activities. Develop deliver and present detailed written and oral reports to clients teammates and management focusing on security trends metrics and strategic recommendations. Provide strategic input and recommendations for improving internal processes procedures and security practices based on industry trends and operational experience. Lead threat hunting activities and oversee special projects employing advanced methodologies to proactively identify and mitigate potential threats. Additional Responsibilities Advocate for and lead the adoption of innovative security solutions and methodologies within the organization. Collaborate with internal stakeholders to address changes in technologies practices and business activities that may impact security. Facilitate cross-departmental initiatives to enhance client security and mitigate threats. Maintain and update comprehensive documentation related to security operations threat analysis and incident management. Ensure timely and accurate communication with clients and internal teams reflecting changes and new findings effectively. Mentor and guide Security Analyst I team members providing support and sharing expertise to enhance their skills and knowledge. Lead by example in adhering to security best practices and take ownership of complex security issues leading escalation efforts to senior resources or specialized teams. Engage actively in team huddles L10 meetings and other collaboratively structured meetings. Review Tickets with Manager Attend company-based meetings as required Participate in the on-call rotation (1 week every ~ 1.5-2 months) Additional duties as required Skills Knowledge and Expertise Five or more years of work experience in information security risk management or related fields. One of the following certifications preferred CompTIA Security+ CompTIA CySA+ CCNA CEH SSCP or equivalent Advanced certifications such as Certified Information Systems Security Professional (CISSP) Certified Ethical Hacker (CEH) Certified Information Security Manager (CISM) Certified Information Systems Auditor (CISA) or Certified Risk & Information Security Controls (CRISC) are highly desirable. Practical knowledge of security technologies and tools including Firewalls IDS/IPS SIEM Identity and Access Management (IAM) remote working solutions and cloud technologies. Understanding of current and emerging threats countermeasures and organizational challenges in addressing these threats. Awareness of information security management frameworks and industry regulations (e.g. NIST ISO 27001 GDPR). Strong problem-solving and decision-making abilities with a capacity to analyze complex issues and develop effective solutions. Excellent verbal and written communication skills with the ability to present complex technical issues in a clear and simple format. Self-motivated detail orientated highly organized and able to handle a variety of tasks and responsibilities in an efficient manner with a high level of quality Demonstrates effective communication skills both written and verbal Shows the ability to adapt and thrive in ambiguous or uncertain situations quickly assessing and navigating challenges. Additional Information You Will Want To Know Applicant selected will be subject to a criminal and department of motor vehicles background checks and must meet Criminal Justice Information Systems (CJIS) requirements post-employment Minimal travel required VC3 offers a comprehensive benefit package and 401K/RRSP company matching Thank you for your interest in VC3. We appreciate all applications however only those candidates selected for an interview will be contacted. About VC3 Inc. VC3 offers Managed IT Services Private Cloud Services Hosted VoIP Custom Web Applications SharePoint Consulting and Website Design & Hosting. VC3 has more than 25 years of experience providing a full range of Information Technology Solutions and Services to hundreds of municipalities and organizations throughout the United States and Canada. The technologies needed by our customers have changed many times over the years but our focus has always stayed the same connect the best technologies with our experienced and talented engineers programmers web designers and support specialists to deliver solutions that take our customers to the next level of productivity and results. We pride ourselves on making IT personal making IT easy and getting IT right. And it all starts with our talented team that is committed to raising the bar. Apply Now Not quite right? Register your interest to be notified of any roles that come along that meet your criteria. Register Your Interest Apply Now Department Technology Operations Employment Type Full Time Location Canada - Remote Workplace type Fully remote View all opportunities at VC3 Inc. Apply Now

Senior Auditor

Milan, Lombardy, Italy

Do you like looking ahead? Discover the new horizons of Open Finance with us this is the opportunity for you! Fabrick is the next-generation Open Finance Platform combining Open Banking and Open Payment services while also bringing together a community of more than 300 fintech companies. We are looking for a Senior Auditor to strengthen the Internal Audit team a key and strategic function supporting governance risk management and the improvement of business performance. Responsibilities Independently conduct end-to-end audit engagements including planning execution reporting and follow-up in accordance with the Annual Audit Plan and the company’s audit methodology. Prepare clear and concise audit reports formulating observations and recommendations aimed at strengthening the internal control system. Monitor the implementation of corrective actions agreed with management and verify their effectiveness. Support the annual risk assessment process by collecting and analysing quantitative and qualitative data and contributing to the definition of the Annual Audit Plan. Support reporting activities to Corporate Bodies and Control Bodies by preparing analyses and documentation in support of the function’s activities. Collaborate with business functions and management promoting constructive dialogue on governance risk and control matters and contributing to the dissemination of an internal control culture. Requirements Master’s degree in Economics Management Engineering or related fields 4–6 years of professional experience gained in consulting firms in the field of internal controls or in Internal Audit functions within banking financial or fintech organizations Strong knowledge of the Global Internal Audit Standards (GIA). Knowledge of the regulatory framework applicable to the banking and payments sector such as Bank of Italy Circular No. 285 PSD2 DORA and EBA Guidelines Experience in conducting audits on operational processes outsourcing risk management compliance or other regulated areas of the financial sector Excellent knowledge of Microsoft Office particularly Excel and PowerPoint familiarity with data analytics tools such as Power BI SQL or similar is considered an advantage. Excellent command of English at B2/C1 level Proactivity autonomy problem-solving skills and results orientation combined with excellent analytical synthesis and communication skills with stakeholders at different organizational levels including top management Professional certifications such as CIA and/or CISA are considered an advantage. What we offer Training portals to design together the growth path that best suits you. Wellhub unlimited access to gyms personal trainers and wellness apps. Serenis a listening and support service to help you take care of your well-being. Employment contract under the CCNL Credito - ABI collective agreement. Salary range €45000 - €55000. The salary offered may vary based on the work location and the selected candidate’s skills and professional experience. Location Milan/Turin/Biella + remote working

GRC – ITGC(General Control) SME

New York, NY

Cybersecurity Audit & Compliance Specialist About The Role As a Cybersecurity Audit & Compliance Specialist you will make an impact by supporting global cybersecurity audit compliance certification and governance initiatives across the organization. You will be a valued member of the Cybersecurity and Risk Management team and work collaboratively with Information Security Legal Vendor Management IT Internal Audit and business stakeholders to ensure compliance with industry standards regulatory requirements and corporate security policies. In this role you will help strengthen the organization's security posture through audit readiness certification management compliance monitoring and continuous improvement initiatives while supporting global information security frameworks and standards. In This Role You Will Support cybersecurity audit and compliance initiatives including ISO 27001 certification ENS certification and other global information security standards and regulatory requirements. Prepare the organization for internal and external security audits by coordinating audit activities tracking deliverables and ensuring timely completion of remediation efforts. Partner with cross-functional teams external auditors advisors and vendors to collect validate organize and present audit evidence and compliance documentation. Conduct compliance reviews gap assessments and remediation tracking to identify and address deficiencies against applicable security frameworks and policies. Review information security requirements within vendor and customer contracts and provide guidance to ensure alignment with corporate cybersecurity standards and controls. Work Model We strive to provide flexibility wherever possible. Based on this role's business requirements this is a remote position open to qualified applicants in the United States . Regardless of your working arrangement we are here to support a healthy work-life balance through our various wellbeing programs. The working arrangements for this role are accurate as of the date of posting. This may change based on the project you're engaged in as well as business and client requirements. Rest assured we will always be clear about role expectations. What You Need to Have to Be Considered Bachelor's degree in Cybersecurity Information Technology Information Systems Business Administration Risk Management or a related field or equivalent professional experience. Experience supporting cybersecurity audits compliance programs regulatory assessments or certification initiatives. Knowledge of ISO 27001 requirements controls risk management principles and certification processes. Experience conducting compliance assessments gap analyses evidence collection and remediation tracking activities. Strong understanding of information security governance policies standards and audit methodologies. Experience managing audit documentation compliance records and evidence repositories. Ability to coordinate multiple projects and compliance initiatives while meeting deadlines. Strong stakeholder management skills with experience collaborating across technical and business teams. Excellent written and verbal communication skills with exceptional attention to detail. Strong analytical organizational and problem-solving abilities. These Will Help You Stand Out Experience supporting ISO 27001 certification or recertification efforts. Knowledge of ENS (Esquema Nacional de Seguridad) requirements and other global cybersecurity compliance frameworks. Experience working with third-party risk management vendor security reviews and contract security assessments. Familiarity with NIST Cybersecurity Framework SOC 2 CIS Controls GDPR or other regulatory and security frameworks. Experience managing corrective action plans and compliance remediation programs. Professional certifications such as CISA CRISC CISM ISO 27001 Lead Implementer ISO 27001 Lead Auditor or similar credentials. Knowledge of cybersecurity risk assessments security governance and control testing methodologies. Experience supporting global audit and compliance programs within large enterprise environments. We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role. Salary And Other Compensation The annual salary for this position is anticipated to be between $95000 and $135000 depending on experience qualifications geographic location skills and other job-related factors. This position is also eligible for Cognizant's discretionary annual incentive program based on performance and subject to the terms of Cognizant's applicable plans. Benefits Cognizant offers a comprehensive and competitive benefits package designed to support the health wellbeing and financial security of our associates and their families including Medical dental and vision insurance Health Savings Account (HSA) and Flexible Spending Accounts (FSA) where applicable Company-paid life insurance and disability coverage 401(k) retirement savings plan with company contributions subject to plan provisions Paid time off company holidays and leave programs Employee Assistance Program (EAP) Wellbeing and mental health resources Professional development training and certification opportunities Career growth and internal mobility programs Associate recognition and reward programs Benefits may vary by location and employment status and are subject to change. Application Deadline Applications will be accepted until September 30 2026 . Cognizant reserves the right to close this posting earlier based on application volume business needs or hiring timelines.

Specialist, Internal Audit

L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers’ mission and quest for professional growth. L3Harris provides an inclusive engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values dedication to our communities and commitment to excellence in everything we do. L3Harris is the Trusted Disruptor in defense tech. With customers’ mission-critical needs always in mind our employees deliver end-to-end technology solutions connecting the space air land sea and cyber domains in the interest of national security. Job Title Specialist Internal Audit Job Code 43504 Job Location Melbourne FL or Remote Opportunity Job Schedule 9/80 Employees work 9 out of every 14 days – totaling 80 hours worked – and have every other Friday off Job Description L3Harris is seeking a qualified individual to join our diverse and dynamic Internal Audit team. The Specialist Audit position is an exciting opportunity to enhance financial operational compliance and business expertise through audits and special projects while recommending opportunities to strengthen the internal control structure and operations. Under the general guidance of the Senior Manager Internal Audit the position will conduct financial operational and compliance assurance audits across all areas of our business. This position will also provide consultative support to business partners to identify solutions to address audit findings with the objective of mitigating risk and improving financial and operational performance Essential Functions Conduct walkthroughs of business processes to evaluate operational practices and assess their design and effectiveness during financial operational and other compliance audits Independently and objectively plan and execute audits in accordance with professional auditing standards Work is performed with general oversight May manage large projects or processes that are both inside and outside of the immediate job area May be responsible for supporting complex projects involving delegation of work and review of work products Lead or assist in the preparation of audit work programs to include sampling methodology and specific audit steps to be performed Prepare time and resource budget estimates to perform the assigned audits and special projects Identify and analyze related key controls processes and systems to determine effectiveness Effectively interact with and communicate audit status and results to internal audit and business stakeholders with emphasis on discussing deficiencies and understanding corrective actions Assist in developing standard audit work programs in support of new audit offerings or enhance existing work programs Assist in developing and implementing digital tools and automations to enhance audit procedures Prepare formal written work papers and reports documenting audit work performed and expressing conclusions ensuring quality is aligned with the departmental standards Show self-drive and willingness to support a variety of audits inclusive of financial program and/or operational tasks Closely collaborate with peers and fulfill other duties as assigned which may include strategic initiatives stakeholder relationship management risk assessment IIA self-assessment and trainings Interface with company-wide finance operation and Compliance groups Travel up to 20% including some international locations Qualifications Bachelor’s Degree and minimum 4 years of prior relevant experience. Graduate Degree and a minimum of 2 years of prior related experience. In lieu of a degree minimum of 8 years of prior related experience. Preferred Additional Skills Relevant professional certification (CPA CIA CISA) – active or in progress Public accounting experience A proactive self-starter with the ability to initiate and manage projects to completion with general supervision Strong interpersonal and communication skills with the ability to work effectively in a team environment Collaborative mindset and ability to build working relationships with process owners management and internal auditors Excellent written and verbal communication skills to communicate effectively with a variety of business stakeholders in the organization Ability to deliver assigned work on schedule and within the allocated budget Ability to draw from prior experience and in-depth analysis of issues Detail oriented with good organizational skills and capable of multi-tasking Microsoft Office proficiency (Excel Word PowerPoint) Big 4 Public accounting experience Working knowledge of GAAP GAAS and IIA standards Industry internal audit experience Knowledge of FAR DFARS and CAS Top Secret security clearance or eligibility and willingness to go through the process In compliance with pay transparency requirements the salary range for this role in California Massachusetts New Jersey Washington and the Greater D.C Denver or NYC areas is $76500-$141500. The salary range for this role in Colorado state Hawaii Illinois Maine Maryland Minnesota New York state Cleveland Ohio Vermont and Virginia is $67000-$124000. This is not a guarantee of compensation or salary as final offer amount may vary based on factors including but not limited to experience and geographic location. L3Harris also offers a variety of benefits including health and disability insurance 401(k) match flexible spending accounts EAP education assistance parental leave paid time off and company-paid holidays. The specific programs and options available to an employee may vary depending on date of hire schedule type and the applicability of collective bargaining agreements. L3Harris Technologies is proud to be an Equal Opportunity Employer. L3Harris is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All applicants will be considered for employment without regard to race color religion age national origin ancestry ethnicity gender (including pregnancy childbirth breastfeeding or other related medical conditions) gender identity gender expression sexual orientation marital status veteran status disability genetic information citizenship status characteristic or membership in any other group protected by federal state or local laws. L3Harris maintains a drug-free workplace and performs pre-employment substance abuse testing and background checks where permitted by law. Please be aware many of our positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information. By submitting your resume for this position you understand and agree that L3Harris Technologies may share your resume as well as any other related personal information or documentation you provide with its subsidiaries and affiliated companies for the purpose of considering you for other available positions. L3Harris Technologies is an E-Verify Employer. Please click here for the E-Verify Poster in English or Spanish. For information regarding your Right To Work please click here for English or Spanish.

IT Audit Assurance - Manager

New York, NY

"Job Description As CohnReznick grows so do our career opportunities. As one of the nation’s top professional services firms CohnReznick creates rewarding careers in advisory assurance and tax with team members who value innovation and collaboration in everything they do! CohnReznick helps organizations optimize performance manage risk and maximize value through CohnReznick LLP (assurance services) and CohnReznick Advisory LLC (advisory and tax services). Together the firm provides leaders with deep industry knowledge and relationships solutions to address clients’ unique business goals and risks and insight on how emerging market forces can drive opportunity. With offices nationwide the firm serves organizations around the world as an independent member of Nexia. We currently have an exciting career opportunity for a Manager to join the IT Audit team in our National Assurance practice. CohnReznick is a hybrid firm and most of our professionals are located within a commutable distance to one of our offices. This position is considered remote which means it does not require job duties be performed within proximity of a CohnReznick office location. However as a remote employee you may be required to be present at a CohnReznick office with scheduled notice for client work team meetings or trainings. YOUR TEAM. This position will support our IT Audit Group. CohnReznick’s specialized SOC practitioners focus on conducting SOC1 and SOC2 audits for third-party service providers while also conducting internal control assessments and attestations. WHY COHNREZNICK? At CohnReznick we’re united by a common mission to create opportunity value and trust for our clients our people and our communities. Whether it’s working alongside your peers to solve a client challenge or volunteering together at the local food bank there are so many ways to find your “why” at the firm. We believe it’s important to balance work with everyday life – and make time for enjoyment and fun. We invest in a robust Total Rewards package that includes everything from generous PTO a flexible work environment expanded parental leave extensive learning & development and even paid time off for employees to volunteer. YOUR ROLE. Responsibilities Include But Not Limited To The Manager IT Assurance must demonstrate a proficient understanding of IT General Controls and automated controls and understand business process controls. The candidate must be comfortable leading the IT component of the audit of internal controls over financial reporting for Public company audits in accordance with Sarbanes Oxley Section 404 (S0X). The candidate will also have significant experience delivering Systems and Organization Control (SOC) reporting examinations. The successful candidate will Lead the planning scoping execution and reporting of a portfolio of IT audits supporting the firm’s public and private company external financial statement audits and SOC 1 and SOC 2 engagements. Lead SOC readiness assessments to identify control weaknesses and opportunities for improvement in the current operating environment and provide recommendations for corrective action the candidate will draft the related observations (business issues) for issuance to respective client leadership and conducts follow-up activities regarding remediation Proactively communicate status to the IT Assurance lead Partner and work in an integrated manner with leadership of the firm and Audit Partners on the Public Company audits. Demonstrate ability to identify and address client needs build solid relationships with clients developing an awareness of Firm services communicate with the client in an organized and knowledgeable manner delivering clear requests for information. Possess supervisory skills to supervise guide and coach activities of other department staff with varying skillsets. Possess effective planning coordination time management and organization skills Demonstrate flexibility in prioritizing and completing assignments on time and within budget Demonstrate attention to detail strong organization skills and ability to be agile and adaptable Perform thorough review of work papers to ensure that procedures have been completed conclusions have been supported and firm’s quality control procedures have been adhered to Contribute technical expertise to the engagements and for the learning and development growth of the team Demonstrated knowledge in ITGCs IT application controls the cloud - AWS Azure Cybersecurity regulatory frameworks as well as IT infrastructure including databases networks and operating systems. Nice to haves – proficiency in data analytics using CAAT tools and ERP systems such as SAP Oracle JDE security. Your Experience. The successful candidate will have Bachelor's degree in Accounting and Computer Science/Information Systems Master’s degree a plus CISA required CPA nice to have 6+ years' relevant work experience Prior experience managing several engagements simultaneously with competing deadlines Outstanding interpersonal skills including written and verbal skills Excellent computer skills including the suite of Microsoft products Must be able to travel and work overtime when necessary In addition please take a moment to review our Universal Job Standards. Studies have shown that we are less likely to apply to jobs unless we meet every single qualification. At CohnReznick we are dedicated to building a diverse equitable and inclusive workplace so if you’re excited about this role but your experience doesn’t align perfectly with every qualification in the job description we still encourage you to apply. You may be just the right candidate for this or one of our other roles In New York City the salary range for an Assurance Manager is $105000.00 to $175000.00. Salary is one component of the CohnReznick total rewards package which includes a discretionary performance bonus generous paid time off expanded and inclusive parental benefits and access to best-in-class learning and development platforms to name a few. ""CohnReznick"" is the brand name under which CohnReznick LLP and CohnReznick Advisory LLC and their respective subsidiaries provide professional services. CohnReznick LLP and CohnReznick Advisory LLC (and their respective subsidiaries) practice in an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law regulations and professional standards. CohnReznick LLP is a licensed CPA firm that provides attest services to its clients. CohnReznick Advisory LLC provides tax and business consulting services to its clients. CohnReznick Advisory LLC and its subsidiaries are not licensed CPA firms. CohnReznick is an equal opportunity employer committed to a diverse and inclusive team to drive business results and create a better future every day for our team members clients partners and communities. We believe a diverse workforce allows us to match our growth ambitions and drive inclusion across the business. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity age national origin or protected veteran status and will not be discriminated against on the basis of disability. For more information please see Equal Employment Opportunity Posters . If you are an individual with a disability in need of assistance at any time during our recruitment process please contact us at CRaccommodation@CohnReznick.com . Please note This email address is reserved for individuals with disabilities in need of assistance and are not a means of inquiry about positions or application statuses. CohnReznick does not accept unsolicited resumes from third-party recruiters unless such recruiters are currently engaged by CohnReznick Talent Acquisition Team by way of a written agreement to provide candidates for a specified opening. Any employment agency person or entity that submits an unsolicited resume does so with the understanding that CohnReznick will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency person or entity."

Internal Audit Advisory - Senior Manager

Tysons Corner, VA

"Job Description As CohnReznick grows so do our career opportunities. As one of the nation’s top professional services firms CohnReznick creates rewarding careers in advisory assurance and tax with team members who value innovation and collaboration in everything they do! CohnReznick helps organizations optimize performance manage risk and maximize value through CohnReznick LLP (assurance services) and CohnReznick Advisory LLC (advisory and tax services). Together the firm provides leaders with deep industry knowledge and relationships solutions to address clients’ unique business goals and risks and insight on how emerging market forces can drive opportunity. With offices nationwide the firm serves organizations around the world as an independent member of Nexia. We currently have an exciting career opportunity for a Senior Manager to join the Internal Audit/SOX team in our Risk Advisory practice. CohnReznick is a hybrid firm and most of our professionals are located within a commutable distance to one of our offices. This position is considered remote which means it does not require job duties be performed within proximity of a CohnReznick office location. However as a remote employee you may be required to be present at a CohnReznick office with scheduled notice for client work team meetings or trainings. YOUR TEAM. The Risk Advisory team is a dynamic and innovative enterprise risk advisory management consulting firm committed to delivering strategic solutions to our clients. We specialize in comprehensive risk analysis assessment and management providing tailored strategies to navigate the complex landscape of enterprise risks. WHY COHNREZNICK? At CohnReznick we’re united by a common mission to create opportunity value and trust for our clients our people and our communities. Whether it’s working alongside your peers to solve a client challenge or volunteering together at the local food bank there are so many ways to find your “why” at the firm. We believe it’s important to balance work with everyday life – and make time for enjoyment and fun. We invest in a robust Total Rewards package that includes everything from generous PTO a flexible work environment expanded parental leave extensive learning & development and even paid time off for employees to volunteer. YOUR ROLE. Responsibilities Include But Not Limited To The Senior Manager in Internal Audit Advisory will lead client engagements that strengthen governance risk management and internal controls—particularly within life sciences manufacturing and consumables environments. This role serves as a trusted advisor to senior stakeholders managing multi-workstream delivery teams and driving high-quality outcomes across Internal Audit and SOX (Sarbanes-Oxley) programs. Client Delivery & Engagement Leadership Lead end-to-end Internal Audit Advisory engagements (planning execution reporting remediation tracking). Manage client relationships expectations and executive communications. Translate regulatory and operational requirements into actionable deliverables. Ensure alignment with IIA Standards COSO and risk-based audit methodologies. Industry-Focused Advisory – Life Sciences Manufacturing & Consumables Evaluate quality systems governance (deviations CAPA change control complaints training). Assess manufacturing operations inventory controls yield/scrap and cost-of-quality risks. Review procurement vendor risk management logistics and distribution controls. Support operational resilience recall readiness and product safety governance. SOX / ICFR Advisory Leadership Lead SOX scoping risk assessments walkthrough oversight and testing strategies. Oversee business process and ITGC testing (where applicable). Support deficiency evaluation remediation planning and external auditor coordination. Standardize templates documentation expectations and review procedures. Offshore / Global Delivery Oversight Manage offshore or co-sourced internal audit and SOX testing teams. Oversee work allocation milestone tracking and quality assurance reviews. Provide coaching to improve documentation quality and professional judgment. Coordinate across time zones to ensure timely delivery and issue resolution. Practice Development & Leadership Mentor consultants and managers provide performance coaching and feedback. Support proposals scoping and engagement economics management. Develop repeatable methodologies templates and accelerators. Contribute to thought leadership in life sciences and manufacturing risk advisory. Your Experience. The successful candidate will have Bachelor’s degree in Accounting Finance Engineering Supply Chain Life Sciences or related fields 8–12+ years of experience in Internal Audit SOX risk advisory or consulting. Strong knowledge of SOX/ICFR and COSO frameworks. Experience in manufacturing life sciences or consumables industries. Experience managing offshore or global delivery teams. Professional certifications (CIA CPA CISA) or active pursuit highly preferred ERP experience (SAP Oracle Dynamics) and understanding of automated controls preferred Familiarity with GxP/GMP environments and quality system controls preferred Experience leveraging data analytics to enhance audit coverage preferred. Trusted advisor to senior client leadership. Consistent delivery of audit-ready high-quality work. Strong balance of technical depth and consulting presence. Effective oversight of offshore delivery with improved efficiency and quality. In addition please take a moment to review our Universal Job Standards. Studies have shown that we are less likely to apply to jobs unless we meet every single qualification. At CohnReznick we are dedicated to building a diverse equitable and inclusive workplace so if you’re excited about this role but your experience doesn’t align perfectly with every qualification in the job description we still encourage you to apply. You may be just the right candidate for this or one of our other roles. In Virginia the salary range for an Advisory Senior Manager is $140000 to $250000.  Actual compensation within the range will be dependent upon the individual's skills experience qualifications and location and applicable employment laws. Salary is one component of the CohnReznick total rewards package which includes a discretionary performance bonus generous paid time off expanded and inclusive parental benefits and access to best-in-class learning and development platforms to name a few.  To learn more about life at CohnReznick visit Life at CohnReznick ""CohnReznick"" is the brand name under which CohnReznick LLP and CohnReznick Advisory LLC and their respective subsidiaries provide professional services. CohnReznick LLP and CohnReznick Advisory LLC (and their respective subsidiaries) practice in an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law regulations and professional standards. CohnReznick LLP is a licensed CPA firm that provides attest services to its clients. CohnReznick Advisory LLC provides tax and business consulting services to its clients. CohnReznick Advisory LLC and its subsidiaries are not licensed CPA firms. CohnReznick is an equal opportunity employer committed to a diverse and inclusive team to drive business results and create a better future every day for our team members clients partners and communities. We believe a diverse workforce allows us to match our growth ambitions and drive inclusion across the business. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity age national origin or protected veteran status and will not be discriminated against on the basis of disability. For more information please see Equal Employment Opportunity Posters . If you are an individual with a disability in need of assistance at any time during our recruitment process please contact us at CRaccommodation@CohnReznick.com . Please note This email address is reserved for individuals with disabilities in need of assistance and are not a means of inquiry about positions or application statuses. CohnReznick does not accept unsolicited resumes from third-party recruiters unless such recruiters are currently engaged by CohnReznick Talent Acquisition Team by way of a written agreement to provide candidates for a specified opening. Any employment agency person or entity that submits an unsolicited resume does so with the understanding that CohnReznick will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency person or entity."

IT Compliance Analyst

Ottawa, Ontario, Canada

The Company At Canopy Growth our mission is clear improve lives end cannabis prohibition and strengthen communities. We believe that cannabis can be a force for good. We’re building a consumer-centric organization that is focused on sharing the transformational potential of cannabis with the world. We will achieve this through an innovative and disruptive portfolio of cannabis and hemp-derived products. Canopy Growth is the world's leading cannabis and hemp company. We recognize that employees are at the core of our success and we take pride in a corporate culture that emphasizes inclusiveness collaboration and diversity. Our employees come from a wide range of backgrounds each bringing their own unique skills and talents to the table working together to continue our incredible momentum of growth. If you are interested in building global challenger brands scaling a business and working in a values-driven environment we want to hear from you! Responsibilities Assist with the control processes to ensure Canopy’s compliance with ITGC and ICFR. Assist in the integration of acquired subsidiaries into Canopy’s ICFRITGC program. Liaise with external resources as required to facilitate IT controls evaluation. Liaise with internal resources as required to understand how changing business process impact core business systems to ensure controls are adequately considered. Understand the overall IT environment and appropriately update process documentation. Assist with the design of IT general controls and application controls and validate their effectiveness throughout the audit period. Assist in identification of controls gaps and collaborate with IT process owners to ensure gaps are appropriately addressed. Special projects as assigned. Position Requirements Formal Education & Certification University degree in Computer Science related discipline or equivalent experience. Minimum of 5 years of IT experience. Minimum of 3 years of compliance experience. CISA or other relevant security-related designation(s) an asset. Knowledge & Experience Significant knowledge of and experience (3+ years) with legal and regulatory compliance standards such as [ICFR ITGC SOX GDPR PCI-DSS NIST CSF etc. Experience (3+ years) with IT governance risk and compliance management. Excellent communication skills and the ability to collaborate effectively with all levels of the organization. Knowledge of computer networking concepts and protocols and network security methodologies. Knowledge of risk management processes (e.g. methods for assessing and mitigating risk). Knowledge of cyber threats and vulnerabilities. Knowledge of risk management processes. Knowledge of cyber threats and vulnerabilities. Knowledge of specific operational impacts of cybersecurity lapses. Proven verbal written presentation and communications skills with all levels of management. This is a full-time fully remote position based out of the Ottawa area. Benefits – extended health and dental coverage paid vacation and participation in our employer-supported retirement savings program Salary range - $70000 - $85000 We appreciate your interest and promise to review all applications but we will only be contacting those who best fit the requirements. We welcome and encourage applications from people with disabilities. Accommodations are available upon request for candidates taking part in all aspects of the selection process. If you require accommodation please notify your Talent Acquisition Partner. Please note the chosen applicant will be required to successfully complete background and reference checks. Recruitment Process All applications for this role are reviewed manually no AI-based screening or ranking tools are used. This post is for an existing vacancy.

Analyst, IT Compliance & Controls

Ontario, Canada

Analyst IT Compliance & Controls Division IT Job location Remote (Canada) Hours 40 hours per week Monday to Friday Employment type Full Time Salary 85-95K A little about us Aurora is proud to be a global leader in the cannabis industry. With a smart strategy unmatched talent and focus on our long-term success we believe we have a bright future. At Aurora we’re passionate about helping patients improve their lives through high-quality premium medical cannabis under brands they can trust and rely on. Our products available across Canada Europe Australia and New Zealand include leading brands like Pedanios IndiMed San Raf Whistler Greybeard and CraftPlant. Our diverse team works passionately across various roles from manufacturing to corporate positions and many more united by our purpose Opening the World to Cannabis . Enabled by science and empowered by people for patients and consumers. We collaborate globally embrace change with courage stay agile and treat everyone with compassion. We live our values daily making a meaningful impact on patients communities and our A-Team. Job Summary The Analyst IT Compliance & Controls supports the organization’s IT compliance risk and control environment across Canada Europe and Australia. This role helps coordinate the design implementation documentation monitoring and continuous improvement of IT General Controls (ITGCs) and related technology controls. Working collaboratively across IT and business functions the Analyst partners with IT leadership application and control owners Information Security Internal Audit and external auditors to support SOX compliance regulatory requirements cybersecurity controls and operational risk management. The role also supports control governance across enterprise applications infrastructure cloud environments and ERP systems including control testing audit coordination remediation activities and ongoing improvements to the organization’s IT control framework. Sound Interesting? Here is a little more… As the Analyst IT Compliance & Controls you will… Partner with IT leadership and Business Application Owners to design implement document and operationalize IT General Controls (ITGCs). Serve as a key coordinator for IT control owner activities across multiple technology domains. Ensure assigned controls are executed consistently monitored regularly and supported by appropriate evidence. Develop compensating controls where control deficiencies or vendor assurance gaps exist. Maintain IT control documentation process narratives risk and control matrices and operating procedures. Support continuous improvement of the enterprise IT control framework. Coordinate execution of SOX IT General Controls across enterprise applications infrastructure cloud platforms and security operations. Manage control evidence collection and documentation within ServiceNow GRC. Monitor control performance and identify opportunities to improve effectiveness and efficiency. Partner with Internal Audit and external auditors during planning walkthroughs testing evidence requests and remediation activities. Track audit observations and coordinate remediation activities through successful closure. Collaborate with Business Application Owners to ensure ERP and critical business applications maintain effective security change management and operational controls. Review new applications enhancements system implementations and process changes to ensure compliance requirements are incorporated into solution design. Support ERP governance activities with particular emphasis on financial reporting controls segregation of duties user access management and change management. Experience supporting or administering Sage X3 or similar ERP platforms is highly desirable. You will be setup for success if you have… Bachelor’s degree in Computer Science Information Systems Business Accounting or a related discipline. 7–10 years of progressive experience in IT compliance IT risk SOX compliance IT audit internal controls or IT governance preferably within a publicly traded or highly regulated organization. Demonstrated experience serving as an IT Control Owner Control Coordinator ITGC Program Lead or in a comparable role with accountability for enterprise IT controls. Experience supporting SOX ITGC programs across enterprise applications infrastructure cloud platforms and security operations. Experience supporting enterprise ERP environments preferably Sage X3 experience with SAP Oracle Microsoft Dynamics or comparable platforms is also relevant. Experience using ServiceNow GRC or a comparable Governance Risk and Compliance platform to manage controls evidence testing issues and remediation activities. Experience working with internal and external auditors throughout audit planning walkthroughs testing evidence collection and remediation cycles. Experience supporting system implementations application enhancements or significant technology changes from a risk and controls perspective. Experience working within multi-jurisdictional or global technology environments is preferred. CISA CRISC CIA CISSP or a comparable professional certification is preferred. Big Four public accounting consulting or equivalent IT audit experience is considered an asset. Bonus Points if you have… . Knowledge of applicable regulatory privacy cybersecurity and control frameworks including SOX/C-SOX NIST Cybersecurity Framework CIS Controls ISO 27001 PCI-DSS GDPR/PIPEDA and other relevant regulatory requirements. Strong knowledge of IT General Controls (ITGCs) IT risk management internal control principles and technology governance practices Strong analytical and risk assessment skills with the ability to evaluate control design and effectiveness identify gaps and recommend appropriate remediation or compensating controls. Ability to interpret compliance and control requirements and translate them into practical sustainable IT processes and controls. Strong audit coordination skills including the ability to support walkthroughs testing evidence requests issue management and remediation activities. Strong technical writing and documentation skills including the development and maintenance of process narratives risk and control matrices procedures and control evidence. Strong problem-solving and professional judgment when assessing technology risks control deficiencies and remediation options. Ability to communicate complex risk and compliance requirements clearly to both technical and non-technical stakeholders. Strong collaboration and stakeholder management skills with the ability to work effectively across IT Information Security Finance Internal Audit and business functions. Strong organizational and prioritization skills with the ability to manage multiple compliance activities audit requests and remediation initiatives across competing deadlines. High attention to detail and accuracy in control execution documentation evidence management and compliance reporting. Why you’ll love working at Aurora Flexibility you will enjoy a flexible work environment that is the perfect blend of work and fun! You will be empowered to achieve work-life balance with flexible hours remote work options meeting-free-Friday-afternoons and more! Total Rewards we will motivate you to go above and beyond with a competitive salary professional development opportunities company SWAG team activities and modern technology. Team we are a diverse and global team of cannabis enthusiasts energetic innovators fitness gurus caring parents foodies and more with a collective passion to nurture an inclusive environment that helps you grow and provide people better days with cannabis. Next steps Apply today by submitting your resume through our website. Apply today by submitting your resume through our website. You can expect your application to be reviewed by our Talent Acquisition Team and not an AI software/system. We we will contact you if we see a fit via email. Think you’re the ideal candidate but you don’t meet all the requirements? Apply anyways. We would love to review your application to see if you’re the right fit or find you an alternative opportunity. Not the role for you? Share this posting with your network while subscribing to our Talent Community to learn more about upcoming opportunities (hot tip if you are an Aurora employee take advantage of the employee referral program by sharing this posting with someone in your network! If they are the successful candidate you may be eligible for a bonus!). Diversity Equity Inclusion Belonging and Accessibility At Aurora we are proud to foster and celebrate a diverse community of professionals! We take pride in nurturing an inclusive culture that empowers our people to be their authentic selves celebrate their differences and love where they work. Our diverse community combined with our inclusive culture is what sets us apart in the industry and equips our A-Team with superpowers – and this is why we encourage all candidates to apply for job opportunities regardless of race national origin colour religion age gender identity or expression sexual orientation marital and family status disability or any other identifying characteristic. We value the unique skills and experience each person brings to Aurora and are committed to creating and maintaining an accessible environment. We are committed to the requirements of the Accessibility for Ontarians with Disabilities Act so if you require accommodation during the hiring process please let our Human Resources team know by contacting us at hr.services@auroramj.com