Senior Security Auditor Information Technology

Senior Security Auditor

Leads complex and high-risk security audits across our cybersecurity, cloud, and software development environments. As a key technical leader, you ensure our security controls are effective, provide audit expertise, and mentor junior team members—all while balancing independence and cross-department collaboration.

• Lead and execute end-to-end audits for AWS, on-premises, SDLC, IAM, and key SaaS platforms.
• Develop engagement scopes, audit programs, and translate security frameworks (NIST CSF 2.0, NIST 800‑53, PCI DSS, FTC Safeguards) into test procedures.
• Assess controls through walkthroughs, configuration reviews, and log analysis; draft clear, actionable findings and remediation recommendations.
• Guide NIST CSF 2.0 maturity assessments and document gaps.
• Serve as audit liaison during external assessments, preparing evidence and managing requests.
• Mentor mid‑ and junior auditors in methodologies and standards.
• Track and validate remediation of findings.
• Contribute to team operations, process improvements, and automation efforts.

#LI-Remote

• 8+ years’ experience in security/IT audit or technical risk roles, leading audits independently.
• Deep knowledge of AWS cloud security and infrastructure‑as‑code.
• Strong understanding of NIST CSF 2.0, NIST 800‑53, PCI DSS, and FTC Safeguards, with practical application experience.
• Experience auditing SDLC, code reviews, CI/CD, and vulnerability management.
• Proficiency with identity providers (e.g., Okta), SSO, and privileged access.
• Excellent written communication and ability to produce executive‑level reports.
• Proven mentoring and leadership skills.
• Certifications (CISA, CISSP, CCSP, AWS Security Specialty, QSA) strongly preferred.
• Experience in regulated industries (automotive, industrial, etc.) is a plus.
• Able to maintain objectivity and strong working relationships with control owners.