IT Auditor  

• Supports information security policies, standards, and procedures to secure and protect data residing on systems, and works directly with user departments to implement procedures and systems for the protection, conservation, and accountability of proprietary, personal or privileged electronic data
• Primarily responsible for assisting vendors in the remediation process of the findings identified during risk assessment process through a constant status meeting.
• Primarily responsible for obtaining and reviewing vendor’s evidence of controls in place to address the business risks.
• Responsible for vendor risk assessment process and supporting the business stakeholders.

Standards applied:
ISO 27001, HITRUST, SSAE16 SOC 2 Type II

• Preferred with CISA/CPA
• Experience working with senior levels of management
• Good follow-up skills and detail oriented
• Security expertise including knowledge on different security risk assessment frameworks (NIST/Octave), standards (ISO27001/HITRUST/ITIL/Cobit), and act such as (HIPAA/GLBA).
• Experience in examining the SSAE 16 Audit report
• Knowledge and understanding of different security products (web/email filtering, disk encryption, IDS/IPS, antivirus, DLP, firewall etc.)
• Knowledge of software development methodologies, application security, and OWASP Top 10 guidelines
• Willing to work on a FIXED NIGHT Shift