IT AUDIT CONSULTANT

We are seeking a detail-oriented IT Auditor to evaluate and enhance our organization's IT infrastructure security controls and compliance frameworks. The ideal candidate will be responsible for assessing risks, identifying vulnerabilities, and recommending improvements to ensure the confidentiality, integrity, and availability of IT systems. This role requires strong analytical skills, knowledge of IT governance standards, and experience in auditing IT processes and cybersecurity frameworks.

KEY RESPONSIBILITIES:

IT Audit & Risk Assessment:

• Conduct IT audits to evaluate systems, applications, networks, and security controls.
• Identify and assess IT risks, vulnerabilities, and compliance gaps.
• Develop and execute audit plans documenting findings and recommendations.

Security & Compliance:

• Ensure compliance with industry standards (ISO 27001, NIST, COBIT, GDPR, HIPAA, SOX, etc.).
• Review and test IT security controls, access management, and data protection measures.
• Assess the effectiveness of cybersecurity policies, incident response, and disaster recovery plans.

Process Improvement & Advisory:

• Provide recommendations to strengthen IT controls and reduce risks.
• Assist in the development and enhancement of IT governance policies.
• Support internal teams with best practices for IT security and compliance.

Reporting & Documentation:

• Prepare audit reports with detailed findings and actionable recommendations.
• Communicate risks and controls effectively to IT leadership and executive management.
• Maintain documentation of audit procedures, results, and remediation efforts.

QUALIFICATIONS:

• Bachelor's degree in Information Technology, Computer Science, Accounting, or a related field.
• 6-8 years of experience in IT auditing, IT risk management, or cybersecurity.
• Experience with IT audit tools, risk assessment frameworks, and security monitoring solutions.

Technical Skills:

• Knowledge of IT governance frameworks (COBIT, ITIL) and security standards (ISO 27001, NIST, CIS).
• Familiarity with network security, cloud computing, databases, and IT infrastructure.
• Experience with penetration testing, vulnerability assessments, and compliance audits.

Soft Skills:

• Strong analytical and problem-solving abilities.
• Excellent communication and report-writing skills.
• Ability to work independently and collaborate with cross-functional teams.

Vertical: Technology