Senior Auditor Information Technology (Job 3014603)

Summary:

We are seeking a Senior IT Auditor with over 3 years of experience in conducting comprehensive cybersecurity audits. Expertise in Sarbanes-Oxley (SOX) compliance testing is a plus. This role will primarily focus on assessing the effectiveness of our company’s cybersecurity controls and processes across IT infrastructure and systems, identifying vulnerabilities, and providing both tactical and strategic recommendations for improvement to ensure regulatory compliance and mitigate cyber risks.

Duties and Responsibilities:

• Lead and conduct cybersecurity audits of IT systems, networks, and applications to assess compliance with internal policies, industry standards, and regulatory requirements.
• Evaluate the effectiveness of cybersecurity controls and identify vulnerabilities, weaknesses, and areas of improvement.
• Develop comprehensive audit plans, testing procedures, and methodologies tailored to specific audit objectives and organizational requirements.
• Collaborate with internal and external stakeholders to gather relevant information, conduct interviews, and analyze documentation to support audit activities.
• Communicate audit findings, observations, and recommendations to management and stakeholders in clear and concise reports.
• Track and monitor implementation of audit recommendations and verify remediation actions to ensure compliance and effectiveness.
• Stay current with emerging cybersecurity threats, trends, and best practices to continuously enhance audit methodologies and processes.
• Additional duties as assigned.

Skills and Competencies:

• Strong technical knowledge of cybersecurity frameworks and controls with hands-on experience with cybersecurity tools and technologies, such as vulnerability scanners, SIEM (Security Information and Event Management) systems, and penetration testing tools.
• Strong interpersonal skills and the ability to build effective relationships with stakeholders at all levels of the organization, including executive leadership, IT teams, and external auditors.
• Proven track record of successfully managing and executing cybersecurity projects from inception to completion, including risk assessment, audit planning, and remediation tracking.
• Proficiency in conducting cybersecurity risk assessments, vulnerability assessments, and penetration testing.
• Familiarity with emerging technologies such as cloud computing, IoT (Internet of Things), and DevOps, and their associated security implications.
• Excellent analytical skills, attention to detail, and the ability to think critically and strategically about cybersecurity risks and controls.

Minimum Qualifications:

• Bachelor’s degree in computer science, information systems, or a related field.
• Minimum of 3 years in conducting cybersecurity audits, SOX testing, risk assessments, and compliance reviews in complex IT environments.
• Knowledge of international cybersecurity standards and frameworks including but not limited to NIST, ISO 27001, COBIT, or CIS Controls and their applicability to organizational cybersecurity programs.

Preferred Qualifications:

• Advanced certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISS) or Certified in Risk and Information Systems Controls (CRISC).
• Master’s degree in computer science, information security, or a related field.

Working Conditions:

• Hybrid role: In-office and remote working conditions.

Travel:

• Travel up to 10%.

This role requires you to be onsite three days a week at either our Boca Raton, FL, Irving, TX, Brisbane, CA, or our Blue Bell, PA location. The other two days are remote, offering the flexibility you need while still engaging in meaningful collaboration with cross-functional teams.

Pay and Benefits Disclosure:

The salary range for this role is $76,000-$114,000 and is based on experience and qualifications. Certain roles are eligible for annual bonus and may include equity. These awards are allocated based on company and individual performance. We offer employees access to healthcare benefits, a 401(k) plan and company match, short-term and long-term disability coverage, life insurance, well-being benefits, and paid time off, among others. Employees accrue up to 120 hours in their first year. Your accrual rate increases after your first year. We also offer 6 paid holidays.

The anticipated application end date will be 12/16/24.