Senior IT Auditor, Quality

Description

The HITRUST Quality department is seeking a Senior Information Technology Auditor to join our team in Frisco, Texas. This role is ideal for experienced IT auditors, HITRUST External Assessor professionals, or other cybersecurity audit professionals who are passionate about assessment quality, consistency, and the integrity of information security assurance.

This is a highly visible and impactful role serving as a quality gatekeeper for HITRUST certifications. You will work closely with the Assurance, Standards, Legal, and Information Security teams, as well as External Assessors, to help maintain the integrity and credibility of the HITRUST ecosystem.

We are looking for professionals who:

• Have experience performing or reviewing IT audits, HITRUST assessments, cybersecurity assessments, SOC 2 examinations, ISO 27001 assessments, and/or IT general controls reviews.
• Thrive in detail-oriented environments where analytical thinking and professional judgment are essential.
• Can work independently while collaborating effectively with internal teams, External Assessors, and customers.
• Value the importance of relevance and reliability in assurance and certification processes.

The ideal candidate will possess strong communication skills, a solid understanding of IT audit and risk management principles, and experience evaluating security controls and assessment methodologies. HITRUST Assessor experience, SOC 2 experience, or prior work in IT assurance, compliance, or cybersecurity audit functions is highly preferred.

This position requires minimal travel, making it an excellent opportunity for professionals seeking meaningful, high-impact work with strong work-life balance in a growing and mission-driven organization.

• Perform quality assurance reviews of HITRUST assessments to ensure compliance with HITRUST Assessment Handbook requirements, assessment methodologies, and certification standards.
• Review HITRUST assessment submissions and certification reports prior to issuance to validate completeness, accuracy, and consistency.
• Lead complex escalated quality reviews involving assessment performance concerns or disputed results.
• Provide guidance and subject matter expertise to External Assessors, Customers and other stakeholders regarding HITRUST assessment expectations, control evaluation approaches, and quality standards.
• Monitor active certifications for adherence to HITRUST criteria.
• Investigate actual or suspected control failures or breaches impacting HITRUST certification status.
• Support thought leadership initiatives by contributing to articles, guidance, and educational content related to cybersecurity assurance, risk management, compliance, and HITRUST assessments.
• Develop and review reporting and metrics related to assessment quality, certification integrity, assessor performance, and program effectiveness.
• Collaborate with internal teams including Assurance, Standards, Information Security, Legal, HR, and Product to support organizational quality initiatives and continuous improvement efforts.

• Bachelor’s degree from an accredited college or university, or equivalent professional experience.
• 3–7 years of experience performing, reviewing, or managing IT audits, cybersecurity assessments, or risk assurance engagements, including areas such as: HITRUST assessments, SOC 1, SOC 2, ISO 27001, PCI audits or examinations, IT General Controls (ITGC) reviews, Information security audits, Risk and compliance assessments.
• Prior experience working for a HITRUST External Assessor organization, public accounting firm, internal audit function, or information security assurance/compliance team.
• Strong understanding of risk management principles and control testing methodologies.
• Knowledge of information security and compliance frameworks such as HITRUST CSF, SOC 2, ISO 27001, NIST, HIPAA, or related control frameworks.
• Proven ability to analyze complex assessment scenarios, evaluate supporting evidence, and apply professional judgment in a quality assurance or audit environment.
• Strong written and verbal communication skills, including the ability to clearly…