Associate IT Audit
Core
Conduct comprehensive IT and cloud security audits to ensure regulatory compliance and enhance security policies.
Role type
Associate IT Audit (Information Security and Cloud Security Auditor)
Builds
Information security and cloud security policies and procedures
Domain
Banking / Information Security / Cloud Security
Required skills
IT General Controls (ITGC) validation, Cloud Security auditing, Vulnerability Management, Third-party risk management, Regulatory compliance assessment, Security policy development, Risk-based security assessments, Identity & Access Management (IAM), Encryption standards, Security infrastructure management
Preferred skills
ISO 27001, CNSS, CCNA, CISA, CISM, CISSP certifications, PCI-DSS knowledge, GRC frameworks, OWASP, MITRE ATT&CK, Change management
Technologies
AWS, Azure, Google Cloud Platform, Palo Alto, Fortinet, Checkpoint Firewalls, SOAR (Cortex), Force Scout
Responsibilities
Conduct IT and cloud security audits across domains including network security and vendor risk assessments. Assess compliance with relevant laws and organizational policies. Develop and enhance information security policies. Maintain audit documentation and ensure closure of non-compliance issues. Manage third-party risk assessments. Participate in product and vendor selection for cloud security solutions.
Seniority
Mid-level (3-7 years experience preferred, 2 years minimum stated)
