Information Technology Auditor

About The Company

Description

• Execute day-to-day activities of IT audit engagements, including SOC 1, SOC 2, and HIPAA assessments, under management direction.
• Evaluate the design and effectiveness of technology controls.
• Identify and communicate IT audit findings to management.
• Assist in identifying performance improvement opportunities for assigned clients.
• Communicate effectively with clients and team members.
• Lead client meetings and foster relationships through proactive communication.
• Provide weekly status reports to management.
• Proactively communicate any potential issues to management.
  

Requirements

• Excellent oral and written communication skills.
• Ability to work independently and collaboratively.
• High degree of motivation.
• Fluent in English, able to communicate confidently in english.
• Bachelor’s degree in accounting, business, cyber security, or management information systems.
• At least 1 year of experience performing IT audit engagements at a Big 4 or other audit/consulting firm.
• Candidates with an active or working towards CISA, CPA, CISSP, ISO 27001 Lead Auditor, or PCI QSA certification.
  

Top 5 Technical Skills Required

• IT Audit Execution – Proficiency in performing SOC 1, SOC 2, and HIPAA audits, including assessing control design and effectiveness.
• Risk Assessment – Ability to identify and evaluate IT risks and control weaknesses in complex environments.
• Compliance Frameworks – Knowledge of standards such as SOC 1/2, ISO 27001, PCI DSS, and HIPAA.
• GRC Tools – Experience with governance, risk, and compliance platforms to streamline audit processes.
• Technical Communication – Skill in documenting and presenting audit findings clearly to technical and non-technical stakeholders.
  

• Compliance Automation Tools – Familiarity with tools like Vanta, Drata, or Secureframe for automating compliance workflows.
• Cloud Security – Understanding of cloud environments (e.g., AWS, Azure) and related security controls.
• Cybersecurity Frameworks – Knowledge of additional frameworks like NIST CSF or GDPR.