IT Audit - Regulatory Compliance Principal Specialist

Oracle•Nashville, TN

16d•Onsite

About The Position

This role is based onsite in Nashville TN or Austin TX - ONLY We are looking for an experienced IT audit professional to play a key role on Oracle Cloud's compliance team. We are seeking candidates who thrive in a dynamic, fast-paced environment and are comfortable managing regulatory compliance. The ideal candidate will be expected to lead our SOC program, contribute to the design and enhancement of controls, and serve as a key liaison with external auditors. A strong background in assessing compliance frameworks is highly desirable. A solid understanding of the SOC framework is essential, while knowledge of additional compliance frameworks such as PCI, HIPAA, and ISO is advantageous.

Requirements

8+ years audit program management experience with either a “Big 4” accounting firm, or a mid-level accounting firm.
4+ years of above experience in the IT or Cloud industry is preferred
Exceptional communication and project management skills.
Strong technical acumen with the ability to interpret technical specifications.
Internal and third-party auditing experience is required.

Nice To Haves

Preferred certifications: CISA, CISSP, CRISC, CISM, ISO 27001, Security+, PMP, or other relevant security certifications.
Experience in Information Technology, Cloud services, or managed hosting services is preferred.
Proven ability to meet stringent deadlines in a fast-paced environment, demonstrating a sense of urgency and results-driven approach.

Responsibilities

Plan, manage, lead, and execute multiple audit programs within OCI with third-party auditors
Evaluate the effectiveness of controls and corresponding evidence in alignment with audit framework requirements
Provide high quality, professional day-to-day execution of audit engagements
Conduct interactions with third party auditors that exhibit control understanding and confidence
Effectively communicate audit engagement status to executive leadership
Ability to communicate in remote working environments over video, phone, email, and other tools
Provide clear expectations and direction to security and engineering teams within OCI on audit requirements
Review audit evidence from the businesses within OCI and analyze for auditor consumption
Communicate within the team autonomously and drive communication across partner teams
Drive project scheduling, tracking, and communications up to the Director level independently
Build, manage, and enhance the efficiency of audit programs as the business scales
Collaborate with subject matter experts to refine operating processes to increase the value and scale of our audit programs and decrease the operational impact to OCI

Benefits

Medical, dental, and vision insurance, including expert medical opinion
Short term disability and long term disability
Life insurance and AD&D
Supplemental life insurance (Employee/Spouse/Child)
Health care and dependent care Flexible Spending Accounts
Pre-tax commuter and parking benefits
401(k) Savings and Investment Plan with company match
Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
11 paid holidays
Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
Paid parental leave
Adoption assistance
Employee Stock Purchase Plan
Financial planning and group legal
Voluntary benefits including auto, homeowner and pet insurance