Senior Technology Risk & Audit Specialist

🏢 Picus · 📍 Ankara, Turkey · 💼 remote · ⏰ Full-Time

⚡ Direct Talent Broker Referral

Why apply through CandidatesReach?

✔ Tailored Executive Endorsement Letter: Highlight your real strengths and verified background directly to hiring leads.

✔ Your Preferred Screening Terms: Choose between a 1-minute quick phone screen or scheduled email calendar.

✔ $500 Cash Hiring Bonus: Receive $500 direct cash reward after 30 days of active employment.

Position Summary & Responsibilities

About The Role

Most traditional auditor roles ask you to prove a company is secure at least once a year. At Picus, continuous security validation is our product.

We are seeking a Senior Technology Risk & Audit Specialist to strengthen our security governance, risk, and compliance capabilities at scale. In this role, you will run assurance the way our customers run security: continuously, with evidence, and side-by-side dominantly with engineering teams. You will own our global certification programs, act as a strategic advisor to our technology teams, and help govern the AI agents at the heart of our platform. Beyond audit execution, you will act as a strategic advisor to business and technology teams, shaping scalable and risk-aware processes in a cloud-native and AI-driven environment. We want you to be the person teams come to before they build, not after.

What You Bring

6+ years of hands-on experience in IT audit, information security, risk and compliance management, preferably within a SaaS, cloud-native, or fast-growing technology environment.
Product Security & Secure SDLC: Proven ability to evaluate software engineering processes from an audit and assurance perspective, covering CI/CD pipeline controls, secure development practices, vulnerability management, software supply chain security, and SBOM governance.
Technical Fluency: You understand how cloud infrastructure, IAM, SIEM, and CI/CD pipelines actually work, allowing you to collaborate effectively with engineers in their own language.
Framework Expertise: Deep, hands-on experience with ISO/IEC standards (particularly 27001 and 27701), SOC 2 Type 2 and NIST frameworks, including preparation, audit coordination, and evidence management.
Strategic Execution: The ability to turn international standards into practical, scalable processes that enable innovation rather than slowing it down.
Regulatory Knowledge: Practical understanding of international privacy regulations (e.g., GDPR, KVKK, CCPA) and third-party risk management (TPRM) practices.
Communication & Influence: Clear written and spoken English. You can write policies that are easy to understand and advise cross-functional stakeholders, driving control improvements withou

🎯 Candidate Preparation Guide For Picus Applicants

Key Role Competencies & Evaluation Highlights

Key Role Focus:

Assesses deep offensive and defensive cybersecurity expertise, continuous threat validation capabilities, and rigorous analytical mindset.

📋 Preparation Priorities (Key Areas to Clarify):

1. Relying purely on compliance-driven security checklists rather than active threat validation
2. Failing to demonstrate a proactive understanding of modern enterprise attack surfaces
3. Showing weak foundational networking or operating system internals knowledge

✨ Recommended Role Alignment Hook:

I approach security through the lens of continuous adversary simulation to prove controls actually hold up against real-world attacks.

🔒 Free Candidate Preparation Access

Unlock Preparation Priorities & Alignment Hook

🤝 Talent Broker Referral · $500 Bonus Included

Apply for Senior Technology Risk & Audit Specialist

Setup your contact terms & referral note to get recommended directly to the hiring lead at Picus.

⚡ Continue with Google (Instant Setup)

or with email

Already have an account? Sign in here