IT Auditor

Job Summary

Act as Senior IT Audit Lead responsible for executing IT audit engagements and focusing on ITGC and ISO 27001 compliance.

• Perform assessment of ITGC and ISO 27001 Annex A controls across access management, change management, IT operations, asset management, vendor risk, and business continuity.
• Support SOX and ISO 27001 audits, including control design, operating effectiveness testing, evidence validation, and audit reporting.
• Review compliance against information security policies, ISMS processes, and risk treatment plans.
• Identify gaps in ISMS implementation, control effectiveness, and compliance adherence; recommend remediation.
• Assist internal and external audits including ISO 27001 certification and surveillance audits.
• Prepare audit documentation including control matrices aligned to SOX and ISO 27001 frameworks.
• Track remediation and validate closure in line with audit and compliance timelines.
• Engage with stakeholders across IT, Cybersecurity, Engineering, Operations, and compliance teams.
• Coordinate with offshore teams (if applicable) for audit support and documentation.
• Provide audit and compliance updates to leadership and customer stakeholders.

• Strong experience in IT Audit, ITGC, SOX compliance, ISO 27001 (ISMS).
• Hands‑on experience in ISO 27001 implementation, audit, or ISMS governance.
• Strong understanding of ISO 27001 Annex A controls, including:
  Access Control, Cryptography, Asset Management, Operations Security, Supplier Security, Incident Management, Business Continuity.
• Experience in control design and operating effectiveness testing across SOX and ISO 27001.
• Ability to assess ISMS maturity, risk treatment plans, and policy compliance.
• Strong experience in audit documentation, work papers, and governance reporting.
• Experience working with external auditors for SOX and ISO audits.
• Strong stakeholder management skills with client IT, cybersecurity, audit teams, and leadership.
• Knowledge of compliance frameworks such as COBIT and NIST CSF.

• Audit / GRC tools:
  Service Now GRC, Archer, Audit Board.
• Compliance frameworks: SOX IT Controls, ISO 27001 (ISMS), COBIT, NIST CSF.
• ISMS governance areas: ISMS implementation & audit readiness; risk assessment & treatment planning; policy & procedure compliance; internal audit / certification support; continuous compliance monitoring.
• ITGC areas:
  Access Management;
  Change Management; IT Operations;
  Backup & Recovery;
  Incident Management.
• Enterprise technology areas: ERP / business applications; infrastructure (OS/DB/Network); cloud (Azure / AWS); IAM & security platforms.

$160,000 – $180,000 a year.

• Discretionary annual incentive.
• Comprehensive medical coverage: medical, health, dental, vision, disability planning, and insurance; pet insurance plans.
• Family support: maternal and parental leaves.
• Insurance options: auto and home insurance, identity theft protection.
• Convenience & professional growth: commuter benefits; certification and training reimbursement.
• Time off: vacation, time off, sick leave, and holidays.
• Legal & financial assistance: legal assistance; 401(k) plan; performance bonus; college fund; student loan refinancing.

Bachelor of Computer Science.