Build and grow strong relationship with cross-functional teams (IT, InfoSec, GRC, Legal, Engineering)
Lead and execute risk based IT audit plans, assessing systems, processes, and controls to ensure compliance with regulations and/or internal policies
Take on complex challenges to drive risk assessments across IT systems, focusing on critical areas such as identity and access management (IAM), data protection, and incident response
Deliver audit reports to senior leadership, translating complex technical risks into strategic, actionable insights with practical remediation plans
Understand applicable laws and regulations to provide a point of view on audit requirements related to information security and privacy controls
Utilize data analysis techniques and audit software to evaluate and monitor IT and operational risks
What You’ll Bring
7 + years of IT Audit experience and/or related experience (Big 4, Information Security, GRC)
Advanced understanding and demonstrated ability to assess the effectiveness of internal control in support of technology processes (e.g. change management, access security, computer operations, etc.)
Strong project management, organizational, and communication skills to sustain work on multiple diverse projects (information security, product security, emerging tech evaluations, etc.)
Familiarity and understanding of major professional audit frameworks, cybersecurity laws and regulations (NIST, IES 62443, ISO 27001, ITIL, COBIT, PCI-DSS, etc.)
Bachelor’s Degree in MIS, Computer Science, or related field or equivalent experience
At least one professional certification such as CISA, CISSP, CISM or equivalent/applicable certification