IT Auditor – Cybersecurity
- Cogent Infotech
21 Hours Ago
NA
NA
Remote
8-10 Years
Required Skills: AWS, Azure, or GCP
Job Description
Job Title: IT Auditor – Cybersecurity.
Location: Remote
Duration- w2 & C2C.
Key Responsibilities:
Perform IT and cybersecurity audits to evaluate internal controls and compliance.
Conduct risk assessments and identify security vulnerabilities.
Review and evaluate IT general controls (ITGC) and application controls.
Assess compliance with frameworks such as:
NIST
ISO 27001
SOC 2
HIPAA (if applicable)
Evaluate security policies, procedures, and standards.
Perform access control and user privilege reviews.
Review network security, system configurations, and logging controls.
Develop audit reports and present findings to stakeholders.
Provide recommendations to mitigate security risks.
Support internal and external audit activities.
Track remediation activities and corrective actions.
Assist in developing cybersecurity governance processes.
Required Qualifications:
Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field
5+ years of experience in IT auditing or cybersecurity auditing
Strong knowledge of:
IT General Controls (ITGC)
Risk Management
Security Controls
Audit Methodologies
Experience with audit frameworks and standards such as:
NIST
ISO 27001
COBIT
SOC 2
Experience conducting vulnerability and risk assessments
Strong documentation and reporting skills
Required Certifications:
CISA (Certified Information Systems Auditor) – Required
Preferred Certifications:
CISSP (Certified Information Systems Security Professional)
CISM (Certified Information Security Manager)
CRISC
CEH
Preferred Skills:
Experience with GRC tools (Archer, ServiceNow GRC, RSA Archer)
Experience in government or regulated environments
Knowledge of cloud security (AWS, Azure, or GCP)
Strong analytical and problem-solving skills
Excellent communication skills
Key Skills:
IT Audit
Cybersecurity Audit
Risk Assessment
Compliance
ITGC
NIST
ISO 27001
SOC2
Security Controls
Governance Risk Compliance (GRC)
