Information Security Auditor
Core
Conduct hands-on security audits across IT infrastructure, applications, and third parties to assess controls, identify risks, and ensure regulatory compliance.
Role type
Information Security Auditor
Builds
Audit reports, remediation strategies, and security posture metrics
Domain
Information Security / IT Infrastructure / Cloud Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security audit execution, vulnerability assessment, risk management, regulatory compliance analysis, audit reporting, remediation planning, stakeholder liaison, cloud infrastructure auditing, security framework knowledge (ISO 27001, NIST, GDPR)
Preferred skills
CISA, ISO 27001 Lead Auditor, CISSP, CCSP certifications, AWS/Azure/GCP auditing experience
Technologies
Windows, Active Directory, Linux, virtualization, networking, firewalls, security architecture, cloud platforms (AWS, Azure, GCP)
Responsibilities
Perform complex security audits on IT infrastructure, applications, and third parties; Assess internal controls and policies to identify deficiencies; Prepare comprehensive audit reports with findings and corrective actions; Identify security risks and recommend cost-effective solutions; Monitor remediation progress of audit findings; Ensure compliance with applicable laws and regulations; Liaise with external auditors and internal stakeholders; Provide regular security posture reports and metrics
Seniority
Mid-level, hands-on IC