IT Auditor

• Assist with coordinating the SOC2, PCI DSS, CCPA, and GDPR audit processes, from preparation to certification, ensuring that controls, documentation, procedures, policies, and evidence are reviewed and uploaded to their respective portals.
• Update and maintain our compliance platforms by leveraging your experience or knowledge of compliance automation tools.
• Conduct internal audits and assess appropriate solutions to complex problems affecting systems and applications to minimize risks
• Identify risks and controls to ensure the currency of the Risk Register
• Assist with maintaining our evergreen Data Lineage map to ensure data classification protections are current for local, regional, and national data protection requirements.
• Assist with facilitating our Vendor Management (VM) program.
• Familiarity with audit processes, evidence collection, and working with external auditors to achieve compliance goals.

Requirements

• Bachelor's or Two-year technical degree in Information Security, Cybersecurity, Computer Science, or a related field.
• Two to Five years of experience in IT Audit or IT Compliance.
• Deep understanding of security frameworks, including SOC2, ISO 27001, NIST 800-53, CCPA, and GDPR.
• Experience with risk assessment, vendors, vulnerability management, and incident response.
• Strong project management skills with the ability to handle multiple projects and timelines.
• Excellent communication and writing skills, with the ability to translate technical concepts into business language for non-technical stakeholders.