IT Auditor Staff, Corporate Technology & Cybersecurity - Hyrbid
Core
Executes assigned testing for Corporate technology and cybersecurity operational audits, evaluating controls and raising exceptions.
Role type
Staff IT Auditor (Cybersecurity & Technology)
Builds
Audit workpapers, risk assessments, and control evaluation reports for corporate technology and cybersecurity operations.
Domain
Corporate Technology & Cybersecurity
Required skills
IT audit testing, cybersecurity control assessment, evidence inspection, sampling, workpaper documentation, risk-based testing, cloud security guidance application, stakeholder communication
Preferred skills
Vulnerability management, network security, security operations, data protection, offensive security, application security, cloud service management, Secure SDLC, banking/financial services experience, regulatory compliance (GLBA, PCI DSS, NIST), CISA certification, AuditBoard, Power BI, ServiceNow, Jira, SailPoint
Technologies
CyberArk, Active Directory, firewalls, WAF, SIEM, XDR, SOAR, DLP, encryption, key management, Microsoft Azure, AWS, Google Cloud, AuditBoard, Power BI, ServiceNow, Jira, SailPoint
Responsibilities
Perform assigned audit procedures including walkthroughs, control assessments, population validation, sample selection, evidence inspection, reperformance, and follow-up testing. Test controls in operational cybersecurity and data-risk areas including IAM/PAM, Active Directory, network security, cloud security architecture, Security Operations, incident response, SIEM/XDR/SOAR, vulnerability management, and data protection. Inspect and test technical and architecture evidence including configurations, access records, scan results, change records, logs, and encryption. Evaluate evidence completeness and reliability, identify gaps, and raise exceptions. Document procedures, evidence reviewed, sample details, results, exceptions, and conclusions in organized workpapers. Analyze exceptions and support the assessment of their cause, impact, and extent. Participate in walkthroughs and client discussions. Use audit tools and data analysis techniques to validate populations and identify anomalies.
Seniority
Staff, hands-on IC
