Senior Information Security Analyst/IT Auditor

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct thorough reviews and quality assurance for IT audits and security assessments.

• Ensure the integrity and quality of HITRUST certifications.

• Collaborate with assessors to evaluate certification products and avoid rubber-stamping.

• Implement security risk management, analysis, and assessment principles.

• Handle multiple assessments at once while adjusting to changing priorities.

• Organize and monitor project tasks effectively.

• Execute assigned responsibilities independently with minimal supervision while collaborating within a team setting.

⛳️ Requirements

• 3 to 7 years of experience in performing and reviewing IT audits, which includes infrastructure audits, IT security reviews, IT general controls reviews, and SOC 2 reports.

• Strong understanding of security risk management, analysis, and assessment concepts along with their practical applications.

• Solid knowledge of technology platforms including UNIX, Windows Server, AWS, networks, and infrastructure.

• Familiarity with AI security concepts, associated risks, governance, and controls.

• Comprehension of Business Continuity and Disaster Recovery (BC/DR) concepts.

• Technical expertise and capability to perform tasks independently with minimal supervision in a collaborative team environment.

• Ability to manage several assessments concurrently and adjust to fluctuating priorities.

• Excellent analytical abilities, detail-oriented, with a knack for developing and applying intricate concepts.

• Strong interpersonal project management skills, with the capability to organize and oversee project tasks.

• Bachelor’s degree or equivalent work experience required.

• Preferred: experience in public accounting within an IT audit role.

• Preferred: knowledge of HITRUST CSF, NIST, ISO, COBIT, ITIL, or another security framework methodology.

• Preferred: HITRUST certifications such as CCSFP and CHQP.

• Preferred: certifications like CISA, HCISPP, CISM, CIA, CISSP, or similar credentials.

🏝️ Benefits

• Fully remote work.

• Rarely required to travel.

• Equal opportunity employer dedicated to diversity and inclusion.