IT Exams Specialist

Position Summary

Wipfli is currently seeking an IT Auditor for our Minnesota Region. The position could be located in either our St. Paul or Minneapolis office. The role of the IT Auditor is a staff level role that is a primary resource for performing information technology general controls reviews, Service Organization Controls (SOC) examinations, and other services within the Risk Advisory and Forensics Services (RAFS) group including technical security assessments.

The Senior IT Auditor will participate in the delivery of IT examinations, information security risk assessments, SOC examinations, HIPAA compliance reviews, and technical security assessments (perimeter vulnerability assessments, internal vulnerability assessments, penetration testing, etc.) by performing these projects and creating project reports and other deliverable for Wipfli clients.

• Performs IT general controls reviews, SOC examinations, and other risk advisory services including technical security assessments. These services will be provided for a variety of clients including financial institutions, health care providers, and IT services organizations.
• Performs control testing, interprets results, and prepares reports.
• Helps maintain testing work programs.

• Bachelor’s degree in Information Security, Information Technology or related discipline, 3-5 years related experience and/or training; or equivalent combination of education and experience in similar role
• A high level of initiative, strong written and verbal communication skills and business acumen oriented around small to middle market companies
• Strong organizational skills in coordinating multiple projects/tasks simultaneously, and meeting deadlines
• Great attention to detail and problem solving skills
• CISA and/or CISSP certifications are desired
• Prior experience as a consultant is desired
• Experience with port scanning, vulnerability assessment and penetration testing tools (e.g., Nmap, Nessus, Metasploit), and manual security testing processes
• Strong knowledge of Windows Server and Linux systems
• Strong knowledge of networking and security technologies including routers, switches, firewalls, IDS, anti-virus, protocol analyzers
• Knowledge of database systems

Women, minorities, veterans and individuals with disabilities are encouraged to apply. All your information will be kept confidential according to EEO guidelines.