Data Centre Compliance Auditor

Bridewell•Texas City, TX

13h•$100,000 - $140,000•Hybrid

About The Position

Bridewell is seeking a Data Center Compliance Auditor to support security and compliance activities for a strategic client’s infrastructure data centers. The role focuses on keeping data center environments audit-ready and supporting regulatory and certification audits across SOX, SOC 2, ISO 27001, PCI, and other requirements. The auditor will coordinate with internal teams and external auditors, gather and maintain evidence, support site walkthroughs, conduct readiness assessments and control testing, and help improve the client’s control environment. The role works with cross-functional stakeholders including facilities, engineering, physical security, and infrastructure finance teams. It includes planning and facilitating remote and on-site audits across owned and leased data centers; responding to auditor requests and inquiries; preparing site teams for walkthroughs; assessing control design and effectiveness; conducting mock audits and tabletop exercises; delivering compliance training; and supporting assessments related to new processes, system changes, and site launches. Applicants must be based in Florida or Texas and authorized to work in the United States. The position follows a hybrid and flexible working policy and requires occasional travel to data center sites, estimated at 25%.

Requirements

At least 5 years of experience in IT audit, compliance, or information security, with demonstrable experience across SOC 2, ISO 27001, SOX, and/or PCI.
Proven experience managing compliance programs within a Three Lines of Defense governance framework.
Experience with the AICPA Trust Services Criteria and SOC 2 reporting framework, including Type I and Type II.
Strong understanding of control design and testing, including evaluating design and operating effectiveness.
Ability to interpret evidence and assess whether it satisfies control objectives and auditor expectations.
Experience planning and executing compliance audits in data center or critical infrastructure environments.
Familiarity with physical and environmental security controls, logical access controls, and change management processes.
Strong stakeholder management skills and ability to build relationships with and influence cross-functional teams at all levels.
Must be based in Florida or Texas.
Must be authorized to work in the United States.

Nice To Haves

Professional certification such as CISA, ISO 27001 Lead Auditor, CISSP, or CRISC.

Responsibilities

Plan, coordinate, and facilitate external remote and on-site audits across the client's owned and leased data center portfolio.
Support audits covering SOX, SOC 2, ISO 27001, PCI, and other audit requirements.
Manage audit schedules, scope definition, and logistics with external auditors.
Serve as a primary liaison between external auditors and internal cross-functional teams during audit engagements.
Gather evidence from facilities, engineering, physical security, and infrastructure finance teams to satisfy auditor requests.
Respond to auditor inquiries with accurate, timely, and well-documented evidence.
Maintain organized evidence repositories and complete audit documentation.
Interpret evidence requirements and guide control owners on expected evidence standards.
Attend and support on-site security walkthroughs at data center facilities.
Conduct virtual and on-site walkthroughs for SOC 2, ISO 27001, and SOX assessments.
Prepare site teams for auditor walkthroughs through pre-audit briefings and rehearsals.
Document walkthrough findings and coordinate follow-up actions.
Test controls covering design effectiveness and provide advisory support across physical and environmental security, logical access, change management, and availability.
Evaluate control design within a Three Lines of Defense framework and provide advisory input on control adequacy.
Conduct mock audits and tabletop exercises to prepare sites for external assessments.
Develop and deliver compliance training to data center teams on control requirements and audit expectations.
Support compliance impact assessments for new processes, system changes, and site launches.
Advise cross-functional teams on the compliance implications of operational changes.
Maintain control descriptions, policies, and procedures relevant to audit scope.