Key Responsibilities
Lead audit activities for SOC 2, ISO 27001 and other compliance frameworks as required by business including planning, control mapping, evidence coordination, walkthroughs, testing support, request management, issue tracking, and remediation follow-up.
Support PCI compliance activities, including requirements mapping, evidence collection, control validation, assessment coordination, and tracking of corrective actions.
Perform continuous monitoring of control activities, compliance obligations, risk indicators, audit evidence, exceptions, and remediation plans.
Support regulatory compliance activities by monitoring applicable requirements, assessing organizational impact, coordinating control or process updates, and maintaining compliance documentation.
Lead SDLC audits by evaluating software development lifecycle processes, secure development practices, change management, access controls, testing, release management, and related evidence.
Conduct control assessments, interviews, walkthroughs, and evidence reviews to determine whether controls are appropriately designed and operating as expected.
Document audit procedures, test results, observations, risks, exceptions, and recommended remediation actions.
Partner with control owners to develop practical remediation plans and monitor action completion.
Maintain accurate compliance records, control narratives, process documentation, and audit support materials.
Prepare status reports, dashboards, and management updates related to assessments, findings, risks, and remediation.
Identify recurring control issues and recommend improvements to strengthen compliance and reduce manual effort.
Perform other GRC tasks as needed.
Qualifications and Experience
Bachelor’s degree in cybersecurity, information systems, accounting, business, or a related field; equivalent experience may be considered.
Experience in IT audit, compliance, risk management, internal controls, or information security assurance.
Knowledge of SOC 2, PCI DSS, ISO27001 frameworks and continuous monitoring, regulatory compliance, and software development lifecycle controls.
Experience performing control testing, evidence evaluation, audit interviews, and issue remediation tracking.
Ability to interpret control requirements and assess how they are implemented in operational processes and technology environments.
Strong attention to detail and ability to maintain accurate, well-organized audit documentation.
Relevant certifications such as CISA, CIA, Security+, CGRC, or equivalent are preferred.
Core Competencies
Audit planning and execution
Control testing and evidence evaluation
Compliance analysis
Issue identification and remediation tracking
Documentation and recordkeeping
Analytical thinking
Cross-functional collaboration
Our benefits
25 days of vacation per year
3 sick days per year
10 study days per year
2 volunteering days per year
4 weeks’ holidays after 5-year tenure, Sabbatical Leave
Up to 48 300CZK personal education budget per year
Pension or life insurance matching donation up to 3% of the salary or 4000 CZK per month
Cash allowance for meals of 95 CZK per working day
Unlimited access to LinkedIn Learning
English/Czech classes
Multisport card
Solarian Referral Program
SolarWinds Appreciation Program
Giving – Donation Matching
Employee Assistance
Competitive Race Reimbursement
Breakfast on Wednesdays
Fresh fruits and snacks on Mondays
SolarWinds is an Equal Employment Opportunity Employer. SolarWinds will consider all qualified applicants for employment without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity, marital status, disability, veteran status or any other characteristic protected by law.
All applications are treated in accordance with the SolarWinds Privacy Notice: https://www.solarwinds.com/applicant-privacy-notice
