ashby
Audit & Assurance Specialist
Lumin Digital
Remote, USA
Full-time
Mid
Remote
USD 105000-125000 / year
Discovered 4 days ago
Communication
Key Skills for This Role
Communication
Full Job Posting
Experience:
- Four (4) or more years of professional experience in information security, GRC, compliance, IT audit, or a related field required.
- Demonstrated experience designing, evaluating, and improving security controls within a GRC platform (e.g., TrustCloud, OneTrust, Drata, or similar) is required.
- Experience working in a regulated financial services, fintech, or similarly regulated SaaS environment required.
- Hands-on experience managing or supporting external audits or assessments, including SOC 2 and/or PCI-DSS, required. Experience supporting HIPAA assessments preferred.
- Experience developing or contributing to an internal audit program, including audit planning, test execution, and formal reporting preferred.
- Experience completing security questionnaires, RFPs, or vendor due diligence requests in a client-facing or pre-sales context preferred.
- Experience managing POA&M processes, tracking remediation activities, and reporting on issue status to leadership preferred.
- Experience coordinating across cross-functional technical and non-technical teams in a fast-paced, deadline-driven environment is required.
- Knowledge, Skills, & Abilities:
- Deep familiarity with security and compliance frameworks, including SOC 2, PCI-DSS, ISO 27001, HIPAA, NIST 800-53, FFIEC IT Examination Handbook expectations, and related standards.
- Strong understanding of control design principles, including the distinction between preventive, detective, and corrective controls, and how to design controls that are both compliant and operationally effective.
- Ability to assess control applicability and effectiveness in a SaaS environment, with an understanding of cloud infrastructure, application security concepts, and shared responsibility models.
- Strong project coordination and organizational skills, with the ability to manage multiple concurrent audit engagements, questionnaire requests, and monitoring work-streams without losing accuracy or quality.
- Excellent written and verbal communication skills, with the ability to translate complex security and compliance concepts for both technical and non-technical audiences, including executives and external auditors.
- Ability to build and maintain program-level dashboards and reporting that give leadership clear, current visibility into the health of the compliance program.
- Critical thinker with strong attention to detail and a proactive approach to identifying risks, gaps, and opportunities for improvement before they become findings.
- Comfortable engaging directly with external auditors, clients, and prospects in a professional and credible manner.
- Ability to design and improve security workflows within GRC platforms, including control configuration, evidence workflows, and test automation where applicable.
- Working knowledge of AI/ML governance and control considerations - including model risk, data lineage, prompt and output handling, and third-party AI services - sufficient to independently execute AI-related testing, evidence, and questionnaire work.
- Self-directed and capable of operating with a high degree of independence while maintaining alignment with team priorities and leadership direction.
- Travel:
- Minimal, generally 12 days or less per year, ~2X team get-togethers a year
- LIFE AT LUMIN DIGITAL
- Lumin Digital is a trailblazer in digital banking solutions, driven by a unique approach to technology, service, and people. We empower credit unions and banks by creating cutting-edge digital experiences that continuously serve, engage, and grow their membership base — and as a 100% cloud-native company, we're purpose-built to unlock the full advantages of the cloud for financial institutions and their users.
- At Lumin, we thrive on curiosity and innovation. Our culture is built on trust in our expertise and decisions, respect for diverse perspectives and talents, and boldness in pursuing new ideas. These values shape a workplace where collaboration thrives, ideas flourish, and new possibilities are discovered every day. We encourage our team to explore, experiment, and challenge the status quo — because continuous improvement isn't just a goal, it's how we operate.
- Benefits include: We take care of our people with medical, dental, and vision insurance, a 401(k) with company match, flexible PTO plus 12 paid holidays, paid sick leave, and paid parental and family leave. We also offer a lifestyle spending account, tuition reimbursement, and a cell phone stipend. Additional details are provided during the interview process.
- Lumin Digital is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender identity, or any other legally protected basis. For more information, visit lumindigital.com.
Preferred Qualifications
- Hands-on experience managing or supporting external audits or assessments, including SOC 2 and/or PCI-DSS, required. Experience supporting HIPAA assessments preferred.
- Experience developing or contributing to an internal audit program, including audit planning, test execution, and formal reporting preferred.
- Experience completing security questionnaires, RFPs, or vendor due diligence requests in a client-facing or pre-sales context preferred.
- Experience managing POA&M processes, tracking remediation activities, and reporting on issue status to leadership preferred.
About Lumin Digital
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Lumin Digital
Marketing Director - Revenue Enablement & Field Marketing
, USA
SeniorFull-time
Discovered 1 months agoView →
Senior Site Reliability Engineer II
, USA
Discovered 4 days agoFull-time
Staff AI Organizational Architect
, USA
Discovered 1 months agoFull-time
Marketing Director - Revenue Enablement & Field Marketing
, USA
Discovered 1 months agoFull-time
Senior Software Implementation Engineer
, USA
Discovered 1 months agoFull-time
Product Designer
, USA
Discovered 1 months agoFull-time
Product Manager
Washington, USA
Discovered 1 months agoFull-time
Senior Account Executive
, USA
Discovered 1 months agoFull-time
Senior Software Engineer for AI
, USA
Discovered 1 months agoFull-time