Senior Information Security Internal Auditor

Builds and runs Everbridge's information security internal audit program within its compliance group, working fully remotely from anywhere in the US. The auditor aligns the program with FedRAMP and CMMC, maintains the security and privacy framework, turns requirements into testable controls for engineering, owns monthly FedRAMP continuous monitoring submissions, and acts as technical contact during audits.

The role is hands-on with automation: evidence collection across cloud, identity, CI/CD and ticketing systems, policy-as-code checks with OPA, Cloud Custodian or AWS Config, and the GRC platform. It needs three years of technical security assessment or compliance work on efforts such as CMMC, FedRAMP, SOC 2 or ISO 27001, cloud security or DevSecOps experience, Terraform, US citizenship and Secret clearance eligibility.