{"id":1683763,"url":"https://alion.io/job/picus-senior-technology-risk-audit-specialist","title":"Senior Technology Risk & Audit Specialist","company":{"id":7245,"name":"Picus","domain":"picussecurity.com","url":"https://alion.io/company/picus","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ankara, Turkey"],"countries":["TR"],"hiring_countries":["TR"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":59000,"max_usd":137000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"SBOM","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"NIST CSF","optional":true},{"name":"Wiz","optional":true}],"status":"live","first_seen_at":"2026-10-01T14:49:22Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-31T18:51:19Z","board_verified":true,"closed_at":null,"days_open":30,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":30},"description":"About The Role\nMost traditional auditor roles ask you to prove a company is secure at least once a year. At Picus, continuous security validation is our product.\nWe are seeking a Senior Technology Risk & Audit Specialist to strengthen our security governance, risk, and compliance capabilities at scale. In this role, you will run assurance the way our customers run security: continuously, with evidence, and side-by-side dominantly with engineering teams. You will own our global certification programs, act as a strategic advisor to our technology teams, and help govern the AI agents at the heart of our platform. Beyond audit execution, you will act as a strategic advisor to business and technology teams, shaping scalable and risk-aware processes in a cloud-native and AI-driven environment. We want you to be the person teams come to before they build, not after.\nWhat You Bring\n6+ years of hands-on experience in IT audit, information security, risk and compliance management, preferably within a SaaS, cloud-native, or fast-growing technology environment.\nProduct Security & Secure SDLC: Proven ability to evaluate software engineering processes from an audit and assurance perspective, covering CI/CD pipeline controls, secure development practices, vulnerability management, software supply chain security, and SBOM governance.\nTechnical Fluency: You understand how cloud infrastructure, IAM, SIEM, and CI/CD pipelines actually work, allowing you to collaborate effectively with engineers in their own language.\n Framework Expertise: Deep, hands-on experience with ISO/IEC standards (particularly 27001 and 27701), SOC 2 Type 2 and NIST frameworks, including preparation, audit coordination, and evidence management.\nStrategic Execution: The ability to turn international standards into practical, scalable processes that enable innovation rather than slowing it down.\n Regulatory Knowledge: Practical understanding of international privacy regulations (e.g., GDPR, KVKK, CCPA) and third-party risk management (TPRM) practices.\n Communication & Influence: Clear written and spoken English. You can write policies that are easy to understand and advise cross-functional stakeholders, driving control improvements without relying purely on formal authority.\nISO/IEC 27001, 22301, 27701, 20000-1 and 42001 LA certifications (nice to have),\nISACA certifications such as CISA (most preferred), CISM, or CRISC, AAIA, AAISM, or AAIR (nice to have),\nHands-on experience with SOC 2, NIST, and CSA STAR reporting frameworks (nice to have),\nLast but not least, we expect you to bring the team spirit that we value the most!\nWhat You'll Do\nPlan and execute risk-based IT and internal audits, with a strong focus on secure SDLC, software engineering processes, cloud infrastructure, and AI security domains,\nEvaluate and enhance the effectiveness of security and governance controls, driving continuous improvement across policies and processes,\nManage audit and security vulnerability findings end-to-end, ensuring sustainable remediation and measurable control improvements,\nLead and oversee global compliance programs (ISO/IEC 27001, 22301, 27701, 20000-1, SOC 2, NIST CSF, CSA STAR) to maintain continuous audit readiness,\nActively support the Third-Party Risk Management (TPRM) program by participating in SaaS security assessments and vendor due diligence,\nDefine and track key audit and compliance metrics, reporting insights to leadership and relevant stakeholders,\nAssess the risk and privacy impact of emerging technologies (AI, ML, and automation), guiding engineering teams on secure adoption practices.\nAbout Picus\nPicus Security is an exposure validation company. One platform proves what attackers can exploit and what your defenses stop, turning every exposure into a defensible decision, autonomously and at the machine speed today's AI threats demand.\nPicus validates attack surfaces, exposures, and security controls as one continuous loop: validate, decide, fix, re-validate. Instead of ranking findings by severity score, Picus proves which exposures are genuinely exploitable in your environment, including the business-critical, restricted, and air-gapped assets a live exploit can never safely touch, so teams act on what truly matters and resolve each exposure into a clear call to patch, mitigate, monitor, or accept with evidence.\nThe Picus Platform spans Autonomous Penetration Testing, Exposure Validation, and Breach and Attack Simulation, unified by Picus Swarm, a swarm of AI agents that runs the whole validation loop continuously. It reaches across on-prem, hybrid cloud, and endpoint environments, with 75+ integrations that ingest from scanners like Tenable and Wiz and operationalize through your EDR, SIEM, firewall, and ticketing tools.\nThe pioneer of Breach and Attack Simulation, Picus proves and improves the security controls you already own, doubling control effectiveness within three months. Picus holds a 95% recommendation rate, 4.9 on G2, and 4.8 on Gartner Peer Insights, and is the #1 Leader on Frost Radar for Automated Security Validation.","description_format":"text","description_chars":5091,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Turkey","iso":"TR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Security Operations","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-10-02T09:57:45Z"}],"visa":[],"liveness":{"score":67,"band":"ok","label":"Likely open","p_open":1,"p_active":0.894,"p_room":0.75,"age_days":29,"expected_fill_days":42,"reasons":["conf:2","velocity","win:late"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/picus-senior-technology-risk-audit-specialist","json_url":"https://alion.io/job/picus-senior-technology-risk-audit-specialist.json","meta":{"generated_at":"2026-10-31T19:28:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30688,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7245},"rest":"https://alion.io/mcp/rest/get_company?id=7245"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpicus-senior-technology-risk-audit-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpicus-senior-technology-risk-audit-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpicus-senior-technology-risk-audit-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/picus-senior-technology-risk-audit-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpicus-senior-technology-risk-audit-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1683763}},{"tool":"search_jobs","arguments":{"company":"picussecurity.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1683763},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}