GRC – ITGC(General Control) SME

Cybersecurity Audit & Compliance Specialist

About the Role

As a Cybersecurity Audit & Compliance Specialist, you will make an impact by supporting global cybersecurity audit, compliance, certification, and governance initiatives across the organization. You will be a valued member of the Cybersecurity and Risk Management team and work collaboratively with Information Security, Legal, Vendor Management, IT, Internal Audit, and business stakeholders to ensure compliance with industry standards, regulatory requirements, and corporate security policies.

In this role, you will help strengthen the organization's security posture through audit readiness, certification management, compliance monitoring, and continuous improvement initiatives while supporting global information security frameworks and standards.

In This Role, You Will

• Support cybersecurity audit and compliance initiatives, including ISO 27001 certification, ENS certification, and other global information security standards and regulatory requirements.
• Prepare the organization for internal and external security audits by coordinating audit activities, tracking deliverables, and ensuring timely completion of remediation efforts.
• Partner with cross-functional teams, external auditors, advisors, and vendors to collect, validate, organize, and present audit evidence and compliance documentation.
• Conduct compliance reviews, gap assessments, and remediation tracking to identify and address deficiencies against applicable security frameworks and policies.
• Review information security requirements within vendor and customer contracts and provide guidance to ensure alignment with corporate cybersecurity standards and controls.

Work Model

We strive to provide flexibility wherever possible. Based on this role's business requirements, this is a remote position open to qualified applicants in the United States. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.

The working arrangements for this role are accurate as of the date of posting. This may change based on the project you're engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.

What You Need to Have to Be Considered

• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Business Administration, Risk Management, or a related field, or equivalent professional experience.
• Experience supporting cybersecurity audits, compliance programs, regulatory assessments, or certification initiatives.
• Knowledge of ISO 27001 requirements, controls, risk management principles, and certification processes.
• Experience conducting compliance assessments, gap analyses, evidence collection, and remediation tracking activities.
• Strong understanding of information security governance, policies, standards, and audit methodologies.
• Experience managing audit documentation, compliance records, and evidence repositories.
• Ability to coordinate multiple projects and compliance initiatives while meeting deadlines.
• Strong stakeholder management skills with experience collaborating across technical and business teams.
• Excellent written and verbal communication skills with exceptional attention to detail.
• Strong analytical, organizational, and problem-solving abilities.

These Will Help You Stand Out

• Experience supporting ISO 27001 certification or recertification efforts.
• Knowledge of ENS (Esquema Nacional de Seguridad) requirements and other global cybersecurity compliance frameworks.
• Experience working with third-party risk management, vendor security reviews, and contract security assessments.
• Familiarity with NIST Cybersecurity Framework, SOC 2, CIS Controls, GDPR, or other regulatory and security frameworks.
• Experience managing corrective action plans and compliance remediation programs.
• Professional certifications such as CISA, CRISC, CISM, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or similar credentials.
• Knowledge of cybersecurity risk assessments, security governance, and control testing methodologies.
• Experience supporting global audit and compliance programs within large enterprise environments.

We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.

Salary and Other Compensation

The annual salary for this position is anticipated to be between $95,000 and $135,000, depending on experience, qualifications, geographic location, skills, and other job-related factors.

This position is also eligible for Cognizant's discretionary annual incentive program, based on performance and subject to the terms of Cognizant's applicable plans.

Benefits

Cognizant offers a comprehensive and competitive benefits package designed to support the health, wellbeing, and financial security of our associates and their families, including:

• Medical, dental, and vision insurance
• Health Savings Account (HSA) and Flexible Spending Accounts (FSA), where applicable
• Company-paid life insurance and disability coverage
• 401(k) retirement savings plan with company contributions, subject to plan provisions
• Paid time off, company holidays, and leave programs
• Employee Assistance Program (EAP)
• Wellbeing and mental health resources
• Professional development, training, and certification opportunities
• Career growth and internal mobility programs
• Associate recognition and reward programs

Benefits may vary by location and employment status and are subject to change.

Application Deadline

Applications will be accepted until September 30, 2026.

Cognizant reserves the right to close this posting earlier based on application volume, business needs, or hiring timelines.