CISA, CISSP, CRISC, PCI ISA, or similar. Key Competencies * Strong analytical and risk-based thinking * Ability to translate regulatory language into practical, business-aligned controls * Excellent ...
CISA, CISSP, CRISC, PCI ISA, or similar. Key Competencies * Strong analytical and risk-based thinking * Ability to translate regulatory language into practical, business-aligned controls * Excellent ...
VP Cyber Security Threat & Vulnerability Management
Raleigh, NC ยท Hybrid
$107K - $145K/yr
CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification and/or desire to obtain such certifications. Job Environment & Physical Requirements: * Hybrid work environment ...
VP Cyber Security Threat & Vulnerability Management
Raleigh, NC ยท Hybrid
$107K - $145K/yr
CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification and/or desire to obtain such certifications. Job Environment & Physical Requirements: * Hybrid work environment ...
CISA, CISSP, CRISC, PCI ISA, or similar. Key Competencies * Strong analytical and riskbased thinking * Ability to translate regulatory language into practical, businessaligned controls * Excellent ...
CISA, CISSP, CRISC, PCI ISA, or similar. Key Competencies * Strong analytical and riskbased thinking * Ability to translate regulatory language into practical, businessaligned controls * Excellent ...
VP Data Protection & Cert Mgmt
Raleigh, NC ยท On-site
CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor) or specialized credentials like CDPSE ...
VP Data Protection & Cert Mgmt
Raleigh, NC ยท On-site
CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor) or specialized credentials like CDPSE ...
CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor) or specialized credentials like CDPSE ...
CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor) or specialized credentials like CDPSE ...
Sr. Manager, Information Security
Raleigh, NC ยท On-site
CISA, CISSP, CRISC, PCI ISA, or similar. Key Competencies * Strong analytical and risk-based thinking * Ability to translate regulatory language into practical, business-aligned controls * Excellent ...
Sr. Manager, Information Security
Raleigh, NC ยท On-site
CISA, CISSP, CRISC, PCI ISA, or similar. Key Competencies * Strong analytical and risk-based thinking * Ability to translate regulatory language into practical, business-aligned controls * Excellent ...
VP Cyber Security Threat & Vulnerability Management
Raleigh, NC ยท On-site
$107K - $145K/yr
CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification and/or desire to obtain such certifications. Job Environment & Physical Requirements: * Hybrid work environment ...
VP Cyber Security Threat & Vulnerability Management
Raleigh, NC ยท On-site
$107K - $145K/yr
CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification and/or desire to obtain such certifications. Job Environment & Physical Requirements: * Hybrid work environment ...
CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification and/or desire to obtain such certifications. Work Environment & Physical Requirements: * Computer for prolonged ...
CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification and/or desire to obtain such certifications. Work Environment & Physical Requirements: * Computer for prolonged ...
Certification: preferred - CPA, CISA, CRISC, AIGP, AAIR, AAISM or similar certification TECHNICAL/SOFT SKILLS * Translate technical and regulatory requirements into clear decisions and expectations ...
Certification: preferred - CPA, CISA, CRISC, AIGP, AAIR, AAISM or similar certification TECHNICAL/SOFT SKILLS * Translate technical and regulatory requirements into clear decisions and expectations ...
Security Engineer - IAM
Raleigh, NC ยท On-site
CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification and/or desire to obtain such certifications. Work Environment & Physical Requirements: * Computer for prolonged ...
Security Engineer - IAM
Raleigh, NC ยท On-site
CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification and/or desire to obtain such certifications. Work Environment & Physical Requirements: * Computer for prolonged ...
Security Engineer - IAM
Raleigh, NC ยท On-site
CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification and/or desire to obtain such certifications. Work Environment & Physical Requirements: * Computer for prolonged ...
Security Engineer - IAM
Raleigh, NC ยท On-site
CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification and/or desire to obtain such certifications. Work Environment & Physical Requirements: * Computer for prolonged ...
CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification and/or desire to obtain such certifications. Work Environment & Physical Requirements: * Computer for prolonged ...
CISSP, CISA, CISM, GIAC, CGEIT, CRISC, OSCE, or other relevant industry certification and/or desire to obtain such certifications. Work Environment & Physical Requirements: * Computer for prolonged ...
CISSP, CISA, CISM, CCNA (Degrees and other certs will be considered) Strong technical and business writing ability Ability to work independently, meet deliverables timely and with high quality as ...
CISSP, CISA, CISM, CCNA (Degrees and other certs will be considered) Strong technical and business writing ability Ability to work independently, meet deliverables timely and with high quality as ...
Certified Information Systems Auditor (CISA) and Certified Internal Auditor (CIA) certifications required. Preferred Skills, Capabilities and Experiences: * Expert knowledge and understanding of ...
Certified Information Systems Auditor (CISA) and Certified Internal Auditor (CIA) certifications required. Preferred Skills, Capabilities and Experiences: * Expert knowledge and understanding of ...
Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA) * Experience ...
Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA) * Experience ...
Oracle certifications * CPA, CIA, or CISA certification Additional Job Standards: * Strong leadership ability with demonstrated crossfunctional influence * Ability to translate regulatory and ...
Oracle certifications * CPA, CIA, or CISA certification Additional Job Standards: * Strong leadership ability with demonstrated crossfunctional influence * Ability to translate regulatory and ...
Cyber Security Engineering, Sr Staff Engineer - 17542
Morrisville, NC ยท On-site
$161K - $242K/yr
Security certifications such as CISSP, CISA, CISM, or CRISC (preferred but not required). * Experience with BISO or Security Champions programs (a plus). Who You Are: * Excellent communicator with ...
Cyber Security Engineering, Sr Staff Engineer - 17542
Morrisville, NC ยท On-site
$161K - $242K/yr
Security certifications such as CISSP, CISA, CISM, or CRISC (preferred but not required). * Experience with BISO or Security Champions programs (a plus). Who You Are: * Excellent communicator with ...
Ping Identity/Transmit Security certifications, CISSP, CISM, or CISA certification a plus * Design, develop, and implement secure and scalable solutions to support our Customer identity and access ...
Ping Identity/Transmit Security certifications, CISSP, CISM, or CISA certification a plus * Design, develop, and implement secure and scalable solutions to support our Customer identity and access ...
GRC Specialist
Raleigh, NC ยท On-site
CISA, CRISC, CISSP, CIA, CPA, or relevant cloud/automation certifications (e.g., Azure, AWS, GCP, Workato). * A bachelor's degree or equivalent related working experience is required * This position ...
GRC Specialist
Raleigh, NC ยท On-site
CISA, CRISC, CISSP, CIA, CPA, or relevant cloud/automation certifications (e.g., Azure, AWS, GCP, Workato). * A bachelor's degree or equivalent related working experience is required * This position ...
Senior Security Engineer II
Raleigh, NC ยท Hybrid
$95K - $158K/yr
... CISA, CRISC, or ISO 27001 Lead Implementer/Auditor Multi-framework experience Experience scaling compliance programs in high-growth environments Work in a way that works for you We promote a healthy ...
Senior Security Engineer II
Raleigh, NC ยท Hybrid
$95K - $158K/yr
... CISA, CRISC, or ISO 27001 Lead Implementer/Auditor Multi-framework experience Experience scaling compliance programs in high-growth environments Work in a way that works for you We promote a healthy ...
Cisa information
See Raleigh, NC salary details
$60.3K - $68K
2% of jobs
$68K - $75.8K
4% of jobs
$75.8K - $83.6K
7% of jobs
$83.6K - $91.4K
11% of jobs
$91.6K is the 25th percentile. Wages below this are outliers.
$91.4K - $99.1K
21% of jobs
The median wage is $101.1K / yr.
$99.1K - $106.9K
17% of jobs
$106.9K - $114.7K
11% of jobs
$116.2K is the 75th percentile. Wages above this are outliers.
$114.7K - $122.5K
9% of jobs
$122.5K - $130.3K
9% of jobs
$130.3K - $138K
6% of jobs
$138K - $145.8K
3% of jobs
$60.3K
$106.6K
$145.8K
How much do cisa jobs pay per year?
What are the key skills and qualifications needed to thrive in the Cisa position, and why are they important?
To thrive as a CISA (Certified Information Systems Auditor), you need a strong understanding of IT auditing, risk assessment, and information systems governance, typically validated by the CISA certification. Proficiency with audit management software, data analytics tools, and familiarity with regulatory compliance frameworks (such as COBIT or ISO 27001) are essential. Strong analytical thinking, effective communication, and attention to detail are key soft skills that help in collaborating with stakeholders and presenting findings clearly. These skills and qualities are crucial for ensuring information systems are secure, reliable, and compliant with industry standards.
What jobs can you get with CISA?
What is the salary of a CISA?
What are common challenges faced by CISAs in their daily work?
CISAs often encounter challenges such as staying current with rapidly evolving technology threats and ensuring compliance with complex regulatory requirements. They must regularly interface with various departments to collect the necessary information for audits, which can require strong interpersonal and negotiation skills. Balancing thoroughness and efficiency while conducting audits is essential, as is providing actionable recommendations that are practical within the business context. Overcoming these challenges helps CISAs add significant value to their organizations by improving IT controls and mitigating risk.
What jobs make $10,000 a month without a degree?
Can you make $500,000 a year in cyber security?
What is a CISA job?
A Certified Information Systems Auditor (CISA) job involves assessing, auditing, and ensuring the security and integrity of an organization's information systems. Professionals in this role evaluate IT controls, identify risks, and ensure compliance with industry standards and regulations. They often work in governance, risk management, and compliance to help organizations protect sensitive data and maintain operational efficiency. CISA-certified professionals can work in various industries, including finance, healthcare, and government.
Job description
Role Summary
The Cybersecurity Compliance Manager is responsible for designing, operating, and continuously improving the company's cybersecurity compliance program within a large-scale retail environment. This role leads the day-to-day execution of compliance activities using the OneTrust GRC platform, with a strong focus on automation, controls monitoring, and audit-ready evidence generation.
The role ensures enterprise alignment with NIST Cybersecurity Framework (CSF) and regulatory requirements including PCI DSS, HIPAA, and U.S. state privacy regulations (CCPA/CPRA).
This role is hybrid and based in our corporate headquarters in Raleigh, NC.
Key Responsibilities
Cybersecurity Compliance Program Execution
- Operate and mature the enterprise cybersecurity compliance program aligned to NIST CSF and applicable regulatory frameworks (PCI DSS, HIPAA, CCPA/CPRA).
- Translate regulatory and framework requirements into clear, monitored internal controls mapped to business systems and processes.
- Serve as a subject matter expert for cybersecurity control compliance across IT, cloud, retail, e-commerce, and corporate environments.
- Lead day-to-day use of the OneTrust GRC compliance modules, including:
- Control libraries and framework mappings
- Automated evidence collection and surveys
- Workflow-driven control testing and remediation tracking
- Compliance reporting and dashboards
- Implement and enhance automation to reduce manual effort and eliminate point-in-time compliance gaps.
- Partner with IT, Audit and Security teams to integrate OneTrust with upstream systems where feasible (e.g., vulnerability management, asset inventories).
- Establish and operate a continuous controls monitoring (CCM) model in dynamic retail and cloud environments.
- Monitor control performance, SLA adherence, and exception trends across in-scope systems (e.g., PCI environments, customer data platforms).
- Track control effectiveness metrics and produce regular compliance reporting for leadership.
- Coordinate and support internal and external audits and assessments, including:
- PCI DSS attestations
- HIPAA risk and compliance reviews
- Privacy regulatory inquiries and assessments
- Maintain audit-ready evidence within OneTrust and drive timely remediation of findings.
- Partner with IT, Internal Audit, Legal, and Privacy to ensure consistent interpretation and execution of control requirements.
- Work closely with system owners, IT leaders, cybersecurity team, and business partners to ensure controls are properly implemented and operated.
- Assign control ownership, track accountability, and facilitate risk acceptance where appropriate.
- Provide guidance and training to control owners on compliance expectations, evidence requirements, and remediation processes.
- 6+ years of experience in cybersecurity compliance, GRC, or IT risk management, preferably in a retail or consumer-facing enterprise.
- Strong working knowledge of:
- NIST Cybersecurity Framework (CSF)
- PCI DSS
- HIPAA Security Rule
- CCPA/CPRA and U.S. privacy obligations
- Experience supporting audits and regulatory assessments in complex, distributed environments.
- Hands-on experience with OneTrust GRC (or comparable GRC platforms) including compliance automation and evidence workflows.
- Experience implementing continuous controls monitoring (CCM) or security metrics programs.
- Retail industry experience supporting point-of-sale (POS), e-commerce, or cardholder data environments (CDE).
- Familiarity with third-party risk and vendor compliance monitoring.
- Relevant certifications (preferred, not required):
- CISA, CISSP, CRISC, PCI ISA, or similar.
- Strong analytical and risk-based thinking
- Ability to translate regulatory language into practical, business-aligned controls
- Excellent stakeholder communication and influence skills
- Detail-oriented with a strong audit and evidence mindset
- Comfortable operating in fast-moving, matrixed retail organizations
California Residents click below for Privacy Notice:
https://jobs.advanceautoparts.com/us/en/disclosures
About Advance Auto Parts
Sourced by ZipRecruiter
At Advance Auto Parts we have a passion for YES. Each day we are motivated by a passion to help our Customers. We have a commitment to advance the lives of our fellow Team Members, Customers, and the Communities where we live and work.
Industry
Motor vehicle and motor vehicle parts wholesalers, retail, internet and it and elementary and secondary schools
Company size
10,000+ Employees
Headquarters location
Raleigh, NC, US