Internal Auditor

About Workstreet

At Workstreet , we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP.  We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.

Get to know the Internal Auditor Team

At Workstreet, our Internal Audit team plays a critical role in helping organizations strengthen their security, compliance, and governance programs through independent and objective assurance services. We partner with clients across a wide range of international frameworks—including ISO 27001, ISO 42001, ISO 27701, SOC 2, HIPAA, GDPR, NIST, and other industry standards—to evaluate the design and effectiveness of their controls. Working in a fast-paced, global environment, our team delivers high-quality, risk-based audits while collaborating closely with customers, Customer Success Managers, and GRC Consultants. If you are passionate about cybersecurity, compliance, and making a meaningful impact by helping organizations improve their security posture, you'll fit right in with our team.

The Opportunity

We are seeking a detail-oriented and proactive Internal Auditor to join our compliance team. This role is ideal for someone with a strong understanding of information security and compliance frameworks, paired with excellent project management and analytical skills. You will be responsible for reviewing and validating control evidence within any GRC platform to ensure ongoing compliance with standards such as ISO 27001, ISO 42001, HIPAA, and GDPR.

What you'll do

Validate Compliance Evidence: Review, assess, and verify documentation and control evidence within the GRC platform (Vanta or any platform that the client utilizes) to confirm alignment with ISO 27001, ISO 42001, HIPAA, and GDPR requirements.

Conduct Internal Audits: Coordinate internal audits and readiness assessments to identify control gaps and recommend effective remediation actions.

Communicate Audit Insights: Provide clear, timely updates and expectations to internal teams regarding audit timelines, deliverables, and compliance outcomes.

Who you are

Proven GRC and compliance auditor - Command 2–5 years of active execution in internal auditing, information security compliance, or Governance, Risk, and Compliance (GRC) roles, with a documented history of constructing and defending rigorous compliance programs.

Framework translation architect - Mastered the execution and structural demands of international standards including ISO 27001, ISO 42001, HIPAA, and GDPR, expertly converting dense regulatory clauses into practical, technical security controls.

GRC automation driver - Deployed and managed automated evidence collection, continuous control monitoring, and real-time audit readiness directly within modern compliance applications, explicitly leveraging Vanta or equivalent platforms.

Disciplined audit portfolio manager - Systematically orchestrate and execute multiple fast-moving compliance initiatives simultaneously, balancing competing testing parameters while aggressively crushing strict audit deadlines.

Cross-functional alignment engine - Deliver authoritative, precision-focused written and verbal English communication that seamlessly bridges the gaps between deep engineering teams, customer success, and corporate leadership.

Surgical gap analyst - Apply micro-level critical analysis to isolate design flaws in control documentation, expose hidden compliance deficiencies, and construct airtight remediation roadmaps before external audits.

Credentialed industry professional - Hold or actively pursue technical designations such as CPA, CIA, CISA, or ISO Lead Auditor to validate your command of advanced compliance governance.

What help you succeed

Tenure scaling within B2B SaaS - Prior success navigating hyper-growth cloud software architectures, subscription environments, and digital compliance automation frameworks.

Direct mastery of IT risk management - Active exposure to foundational information security protocols, network vulnerability testing parameters, and technical access control schemas.

Execution of evidence-backed audit programs - Direct experience auditing complex system logs, validating technical evidence parameters, and engineering flawless procedural process documentation.

What we offer

Career Development : Clear path with mentorship and training opportunities.