Information Systems Auditor (Cybersecurity)

Location: Remote, Ankara, Turkey

Company

hirify.global develops a cybersecurity platform for continuous attack-surface, exposure, security-control, and breach-and-attack validation across on-premises, hybrid-cloud, and endpoint environments.

What you will do

• Plan and execute risk-based IT and internal audits focused on secure SDLC, software engineering, cloud infrastructure, and AI security.
• Evaluate security and governance controls and drive measurable improvements across policies and processes.
• Manage audit and security vulnerability findings through remediation and control improvement.
• Lead global compliance programs covering ISO/IEC 27001, 22301, 27701, 20000-1, SOC 2, NIST CSF, and CSA STAR.
• Support third-party risk management, SaaS security assessments, vendor due diligence, and customer-facing compliance activities.
• Define audit and compliance metrics, report insights to stakeholders, and assess the privacy impact of emerging technologies.

Requirements

• 5+ years of experience in audit, compliance, risk management, or information security, preferably in a SaaS, cloud-native, or technology environment.
• Hands-on experience with ISO/IEC 27001, 27701, 22301, and 20000-1, as well as SOC 2, including audit preparation, coordination, and evidence management.
• Experience advising cross-functional stakeholders and improving controls in dynamic technology environments.
• Practical knowledge of GDPR, CCPA, and related security and privacy compliance practices.
• Experience with third-party risk management, vendor due diligence, and simultaneous audit or compliance initiatives.
• Strong written and verbal English is required, including documentation and policy writing.

Nice to have

• ISO 27001, 22301, 27701, or 20000-1 Lead Auditor certification.
• CISA, CISM, or CRISC certification.
• Experience with SOC 2, NIST, or CSA STAR reporting frameworks.
• ITIL certification.

Culture & Benefits

• Remote work within the Ankara, Turkey location context.
• Opportunity to contribute to a cloud-native and AI-driven cybersecurity environment.
• Work focused on continuous certification readiness, security control maturity, and customer trust.