Risk & Compliance Auditor

Job Responsibilities

• Coordinates and conducts annual internal audits for compliance with ISO 14001, ISO 45001, and ISO 9001.
• This includes scheduling audits, preparing audit reports, and consulting with business units on interpreting audit results, managing risks and evaluating proposed remediation.
• Assists with management of the Governance Risk & Compliance software platform, including creating audits, deploying audit questions, entering corrective actions, generating reports for meetings, providing user training and monitoring completion status.
• Evaluates information security and privacy practices of vendors/suppliers to ensure alignment with company standards.
• Responds to customer inquiries regarding the company’s security strategy and practices.
• Affords support for coordination of penetration testing with external consultants and internal resources, monitoring of corrective action plans and distribution of reports to interested parties.
• Processes insurance claims for the Risk & Legal business unit.

Qualifications

• High school diploma required. Post secondary education in a business-related field preferred.
• Minimum of one year of related experience comparing evidence with a standard and/or regulatory compliance required. Experience with internal auditing preferred.
• Experience with internal compliance or operational audits will be considered in lieu of ISO experience, for example, experience with reviewing contractual requirements, adherence to internal policies, reviewing processes and workflows.
• Ability to work autonomously and meet deadlines.
• Strong organizational and time management skills.
• Excellent verbal and written communication skills, including the ability to present information in meetings.
• Proficiency in report writing and analysis.
• Enthusiastic about learning from peers, studying and taking educational courses on auditing, standards, root cause analysis, and risk management.
• Understanding of audit system reporting, usage and troubleshooting.