Experience disruption-proof digital banking with Lumin Digital's cloud-native Compounding Growth Platform, offering innovative solutions for financial institutions.
About the role
Design, document, and implement security and compliance controls across applicable frameworks, including SOC 2, PCI DSS, ISO 27001, and HIPAA, applying established practices to ensure controls meaningfully strengthen Lumin’s security program rather than simply meeting checkbox requirements. Assess the design and operating effectiveness of controls, escalating deficiencies and exceptions promptly and driving improvements that strengthen security, reduce redundancy, and enable the business. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- Four (4) or more years of professional experience in information security, GRC, compliance, IT audit, or a related field required
- Demonstrated experience designing, evaluating, and improving security controls within a GRC platform (e.g., TrustCloud, OneTrust, Drata, or similar) is required
- Experience working in a regulated financial services, fintech, or similarly regulated SaaS environment required
- Hands-on experience managing or supporting external audits or assessments, including SOC 2 and/or PCI-DSS, required. Experience supporting HIPAA assessments preferred
- Experience developing or contributing to an internal audit program, including audit planning, test execution, and formal reporting preferred
- Experience completing security questionnaires, RFPs, or vendor due diligence requests in a client-facing or pre-sales context preferred
More about this role
The Audit and Assurance Specialist is a core member of Lumin Digital's Audit and Assurance team, sitting within the Risk organization. This role is responsible for the design, monitoring, and continuous improvement of security and compliance controls across Lumin's regulatory frameworks, including SOC 2, PCI DSS, ISO 27001, HIPAA, and other applicable standards. The Audit and Assurance Specialist approaches control work with a dual mandate: ensuring that controls satisfy regulatory and audit requirements and that they genuinely strengthen Lumin's security posture rather than serving as a compliance checkbox. This position executes day-to-day activities across the internal and external audit lifecycle in accordance with the methodology and standards set by the Lead, Audit & Assurance, plays a key role in client and prospect trust initiatives, and is central to Lumin's ability to demonstrate a mature, credible, and continuously improving security program.
Design, document, and implement security and compliance controls across applicable frameworks, including SOC 2, PCI DSS, ISO 27001, and HIPAA, applying established practices to ensure controls meaningfully strengthen Lumin’s...
Browse similar: Startup jobs · Remote jobs