Forge Marketplace Auditor

• Competitive salary

Remote.

Senior Level (7+ years of experience).

We are seeking a Forge Marketplace Auditor to assess applications built on the Atlassian Forge framework for security, compliance, and governance adherence. This role combines technical application review with formal audit and risk assessment practices, ensuring marketplace applications meet organizational and platform-level security standards. The ideal candidate brings a strong background in IT audit or application security, along with familiarity with cloud-based application architecture and integrations.

• Conduct audits and assessments of applications developed using the Atlassian Forge framework.
• Review marketplace applications for adherence to security, compliance, and governance requirements.
• Verify compliance with Atlassian Marketplace requirements and organizational security standards.

• Evaluate access controls, authentication mechanisms, data handling practices, and permission models.
• Assess application architecture, APIs, integrations, and cloud-based services for potential risks and vulnerabilities.
• Review SDLC processes, change management procedures, and release practices.

• Analyze audit findings and document risks, control deficiencies, and remediation recommendations.
• Prepare audit reports and present findings to technical and business stakeholders.
• Perform risk assessments for new applications, enhancements, and third-party integrations.

• Partner with development teams to validate corrective actions and track remediation efforts.
• Monitor emerging security threats, platform changes, and marketplace requirements that may impact submitted applications.
• Support internal and external compliance initiatives related to cloud security, privacy, and application governance.

• 7+ years of experience in IT audit, application security, or technology risk roles.
• Experience auditing or assessing cloud-based applications, including architecture, APIs, and integrations.
• Strong knowledge of access controls, authentication/authorization, and permission models.
• Experience reviewing SDLC, change management, and release practices for compliance and risk.
• Experience conducting risk assessments and controls testing.
• Strong audit reporting skills, including documenting findings and remediation recommendations.
• Experience presenting audit findings to technical and business stakeholders.

• Direct experience with the Atlassian Forge framework and/or Atlassian Marketplace application review.
• Experience with cloud security and application governance programs.
• Experience validating remediation efforts and tracking corrective actions with development teams.
• Familiarity with data security and privacy requirements for cloud-based applications.

• Strong analytical and risk-assessment mindset with attention to detail.
• Excellent written and verbal communication skills for audit reporting and stakeholder presentations.
• Ability to work independently and manage multiple audit engagements.
• Collaborative approach when partnering with development teams on remediation.
• Strong understanding of application security and governance best practices.

This is a remote position.