Act as the main point of contact between the network team and audit, risk, and compliance groups
Support internal and external audits by gathering information and tracking findings
Work with teams to meet regulatory requirements (such as SOX, SOC, PCI, and other standards)
Track and manage security risks and vulnerabilities, and support plans to fix them
Monitor and report on security issues, including vulnerabilities and risk items
Partner with engineers and leaders to close gaps identified during audits
Help create reports (monthly, quarterly, annually) on compliance and risk activities
Maintain and update tracking tools such as JIRA or risk systems
Support process improvements, including automation of repeat audit requests
Present updates on security metrics and project progress when needed
Participate in team meetings and project discussions

3–5 years of experience in network, security, or IT project work (with focus on audits or risk)
Strong communication skills and ability to work with technical and non-technical teams
Basic knowledge of audit and compliance standards (SOC, HIPAA, PCI, NIST, etc.)
Experience tracking risks, vulnerabilities, or audit findings
Familiarity with tools like JIRA or similar tracking systems
Understanding of network and security concepts is preferred
Experience with vulnerability tools or platforms is a plus
Comfortable working with multiple teams and managing competing priorities
Basic knowledge of Microsoft Office tools (Excel, Word, PowerPoint, Teams, etc.)
Strong organization skills and attention to detail
Experience with automation tools (such as Python or Ansible) is a plus

Senior Infrastructure Engineering Advisor – Governance, Risk & Compliance

Key skills