IT Auditor Staff, Corporate Technology & Cybersecurity

Lead operational audit testing for corporate technology and cybersecurity controls, validating evidence, documenting results, and surfacing exceptions and emerging risks.

Responsibilities

• Execute assigned audit procedures, including walkthroughs, control assessments, population validation, sample selection, evidence inspection, reperformance, and follow-up testing
• Test operational cybersecurity and data-risk controls across areas such as:
  • IAM/PAM and Active Directory
  • Network security and firewalls
  • Cloud security architecture and WAF
  • Security Operations, incident response, and SIEM/XDR/SOAR
  • Vulnerability management and CTI
  • Data protection and privacy, including DLP, encryption, and key management
  • Application security and Secure SDLC
• Inspect and test technical and architecture evidence for assigned specialties (for example: configurations, access records, scan results, change records, logs, encryption, certificates, and documented exceptions)
• For cloud-scope audits, consult provider security guidance to inform walkthroughs and testing, including areas such as network security, access, segmentation, logging, and secure connectivity, aligned to company policies, standards, and audit criteria
• Assess evidence for completeness, reliability, relevance to the control, and consistency with the control objective; identify gaps or contradictions and raise them promptly
• Document procedures, evidence reviewed, sample details, results, exceptions, and conclusions in organized, traceable workpapers
• Participate in walkthroughs and client discussions; clarify evidence requests and testing questions and follow up on outstanding items
• Analyze exceptions to support assessment of cause, impact, extent, and potential compensating controls
• Assist with issue development, report preparation, issue validation, and examination support materials
• Use audit tools and data analysis techniques to validate populations, identify anomalies, and improve testing coverage
• Incorporate review comments and maintain audit files in line with Internal Audit quality standards

Requirements

• At least 3 years of relevant experience in IT audit, cybersecurity audit, technology risk, or related control testing, including at least 2 years directly performing IT or cybersecurity operational audits
• Hands-on operational audit testing in at least one target profile:
  • (1) IAM/PAM, including CyberArk, Active Directory, or firewall/network controls; or
  • (2) cloud security/WAF, SIEM/XDR/SOAR, DLP, encryption/key management, or vulnerability evidence
• Operational audit experience limited to general ITGC testing is not sufficient (comparable tools are acceptable)
• Working knowledge of risk-based audit testing, evidence evaluation, sampling, workpaper documentation, and communicating exceptions
• Familiarity with official security guidance for Microsoft Azure, AWS, and Google Cloud, including:
  • Azure network security best practices
  • AWS Well-Architected Security Pillar
  • Google Cloud Well-Architected security guidance
  Apply relevant guidance during audit testing
• Ability to manage assigned testing, meet deadlines, and raise questions or concerns promptly
• Strong analytical, written, and verbal communication skills, including explaining evidence needs to technical and nontechnical stakeholders

Technologies

• CyberArk
• Active Directory
• SIEM
• XDR
• SOAR
• DLP
• Encryption
• Key management
• Secure SDLC
• CTI
• WAF
• Microsoft Azure
• AWS
• Google Cloud
• AuditBoard
• Power BI
• ServiceNow
• Jira
• SailPoint

Preferred Experience

• Experience testing controls in multiple technology or cybersecurity audit areas, especially:
  • Vulnerability Management
  • Network Security
  • Security Operations
  • Data Protection
  • Offensive Security
  • Application Security
  • Cloud Service Management
  • Secure SDLC
• Banking or financial-services experience; exposure to GLBA, Interagency Guidelines, SWIFT CSP, PCI DSS, OWASP, CIS Benchmarks, NIST CSF, or NIST SP 800-series guidance
• Hands-on exposure to cloud environments or cloud security controls
• CISA or another relevant certification, or active progress toward one
• Relevant IT or cybersecurity coursework, professional training, or hands-on experience
• Familiarity with AuditBoard, Power BI, ServiceNow, Jira, or SailPoint

Benefits

• Medical
• Dental
• Vision
• 401k
• PTO/paid sick leave
• Employee stock purchase plan

Location: Santa Ana, CA (hybrid)

Pay range: $73,900.00 - $98,500.00 annually