Nordic
Audit Program Director
US - National · Director
Sponsorship not specifiedDetected 1 hour ago
CybersecurityComplianceAuditingProcess ImprovementLeadershipCommunicationProblem SolvingInternal AuditCISSP
About the role
- Nordic's Audit Program Director will lead and actively execute the organization's internal and external audit program across Information Technology and related business functions.
- This is a hands-on role responsible for managing the full audit lifecycle while directly performing key audit activities, including planning, evidence collection and review, coordination with auditors and internal stakeholders, tracking remediation efforts, and supporting control improvement initiatives.
- Working alongside other team members and business partners, the Audit Program Director will ensure audit readiness, timely and effective audit execution, and strong accountability for addressing identified findings and strengthening the organization's control environment.
Responsibilities
- Performs duties and responsibilities corresponding with assigned functions within department which may include, but are not limited to, any combination of the following tasks:
- Coordinating with internal and external auditors, assessors, certifying bodies, and business stakeholders to support successful audit execution and timely responses to requests
- Developing, maintaining, and improving audit procedures, standards, documentation, and evidence repositories to support repeatable and efficient audit performance
- Assessing the design and operating effectiveness of controls and identifying opportunities to strengthen Nordic's control environment, compliance posture, and operational maturity
- Promoting a culture of accountability, transparency, and continuous improvement in support of Nordic's risk management and assurance objectives
- Experience coordinating with external auditors, certification bodies, assessors, and internal stakeholders in support of successful audit and certification outcomes
- Proven ability to assess control design and operating effectiveness, identify gaps, and drive remediation efforts through closure
- Ability to prioritize multiple initiatives, manage competing deadlines, and maintain a high level of accuracy and accountability
Requirements
- Strong working knowledge of Cyber Essentials, ISO/IEC 27001, HITRUST CSF, NIST Cybersecurity Framework (CSF) 2.0, and SOC 2 / Trust Services Criteria audits and assessments required
Nice to have
- Leading and actively executing Nordic's internal and external audit program across Information Technology and related business functions
- Managing the full audit lifecycle, including audit planning, readiness activities, evidence collection, evidence review, auditor coordination, issue tracking, and remediation follow-up
- Directly participating in the execution of audits alongside internal team members and cross-functional stakeholders, ensuring timely and accurate completion of audit activities
- Serving as the primary owner for internal, external, and certification audits and assessments related to Cyber Essentials, ISO/IEC 27001, HITRUST CSF, NIST-based control assessments, and SOC 2 examinations
- Tracking audit findings, observations, and remediation activities through closure, while driving accountability across technical and business teams
- Partnering closely with Information Security, Infrastructure, Compliance, Privacy, Legal, and operational teams to ensure alignment of audit activity with organizational priorities and obligations
- Supporting ongoing control maturity and audit readiness efforts through gap assessments, internal reviews, process improvement initiatives, and policy or control enhancement recommendations
- Preparing clear and concise audit status updates, findings summaries, risk insights, and remediation progress reports for leadership and key stakeholders
Skills
- Demonstrated experience managing and performing internal and external audits across cybersecurity, compliance, and control frameworks
- Strong understanding of IT general controls, cybersecurity controls, risk management practices, and audit evidence requirements
- Strong analytical, organizational, and problem-solving skills with exceptional attention to detail
- Must demonstrate and embody Nordic's maxims
This listing is sourced directly from Nordic's careers page and normalized into a canonical job model.