About the Role
As a Senior Risk & Audit Specialist at Upsun, you help keep our security, risk, audit, and compliance work moving with clarity, care, and consistency. Reporting to the Director, Risk & Audit, you'll work closely with teams across Security, Engineering, IT, Legal, Product, and Sales to keep key audits and certifications (including ISO 27001, SOC 2, PCI DSS, and HIPAA) on track and our global business audit-ready. You're practical, organized, and curious; someone who enjoys making complex requirements easier to understand and thrives when balancing planned work with time-sensitive audit and customer requests. You partner with control owners across the business to coordinate evidence, monitor risk, and turn complex requirements into guidance that's easy to act on. Beyond keeping audits on track, you contribute to the long-term evolution of our risk and compliance program by supporting readiness for new and expanding assurance needs, simplifying repeatable processes, and improving evidence quality. Your attention to detail, cross-functional mindset, and clear communication help leadership stay informed and give our customers confidence in our security posture.
Responsibilities
- Support active and upcoming audits, coordinating evidence collection, reviewing quality, scheduling walkthroughs, and following up with control owners.
- Support risk assessments, risk register updates, control monitoring, issue tracking, and risk treatment follow-up.
- Conduct third-party risk management reviews.
- Support ongoing compliance activities across established frameworks and emerging readiness work, maintaining policies, procedures, control narratives, and supporting documentation.
- Respond to customer and prospect security or compliance questions, and support updates to trust documentation.
- Prepare clear updates on audit status, risks, blockers, metrics, and remediation progress for leadership.
- Use risk, audit, and compliance tools for organization, traceability, and reporting.
- Support internal audit and review activities.
Requirements
- 5+ years of experience in risk, audit, compliance, governance, or security assurance.
- Hands-on experience supporting audits, evidence collection, control testing or monitoring, and remediation tracking.
- Working knowledge of security and compliance frameworks (e.g., ISO 27001, SOC 2, PCI DSS, HIPAA, ISO 42001, GDPR, PIPEDA).
- Ability to explain requirements clearly to technical and non-technical audiences.
- Strong organization and prioritization skills, managing multiple deadlines.
- Good judgment, attention to detail, and practical problem-solving approach.
- Comfort working in a remote, global environment with cross-functional teams across varied timezones.
Skills
- Experience with GRC tools or audit management platforms.
- Experience supporting customer assurance, security questionnaires, or trust documentation.
- Working knowledge of Third-party Risk Management (TPRM).
- Relevant certifications (e.g., CISA, CRISC, CISSP, CC, CISM, CGEIT, ISO 27001, ISO 42001).
Location
- Remote
- Canada
- Spain
- Germany
- France
- United Kingdom
Work Type
- Remote
Experience Level
- 5+ years of experience
Benefits
- Flexible PTO
- Comprehensive healthcare coverage (UK, Canada, France, Spain, USA)
- Company stock options
- Professional development budget
- Office equipment budget
- Wellness budget
- Annual team gatherings
- Internet reimbursement
- Inclusive parental leave
- Remote work travel program
About the Company
- Upsun is a cloud application platform designed for hybrid teams, enabling developers, DevOps engineers, and platform teams to build, ship, and scale confidently without backend infrastructure.
- Offers predictable performance, secure and compliant environments by default, real-time observability and profiling, and rapid cloning, configuration, and provisioning.
- Provides AI-ready features that integrate directly into existing stacks.
- The name 'Upsun' signifies uptime, reliability, acceleration, and 24x7 globally distributed 'follow-the-sun' support.
- Believes software should power brighter solutions and greater innovation.
- Composed of a remote, global, multicultural workforce committed to open source and an open, welcoming environment.
- Values include making a positive impact, aiming for the stars, and caring for each other.
- Recognized by Forbes’ Top 30 Companies for Remote Jobs and France’s Best Workplaces for Women.
- A proud B Corp.
Equal Opportunity
- At Upsun, we celebrate diversity in all its forms and are committed to fostering an inclusive, equitable, and supportive workplace where everyone can thrive. We embrace and value different perspectives, backgrounds, and experiences, because they make us stronger as a team. Whoever you are, wherever you're from, and whatever path you've taken, you are welcome here. We encourage you to bring your whole self to work, connect with others, and share your passion. If you need accommodations at any stage of our hiring process, please let us know. We're here to ensure an accessible and comfortable experience for you.
