Overview
This role leads complex, high-risk security audits across cybersecurity, cloud, and software development environments. As a key technical leader, you will ensure security controls are effective, provide audit expertise, mentor junior team members, and balance independence with cross-department collaboration.
Responsibilities
- Lead and execute end-to-end audits for AWS, on-premises environments, SDLC, IAM, and key SaaS platforms.
- Develop engagement scopes and audit programs; translate security frameworks (NIST CSF 2.0, NIST 800-53, PCI DSS, FTC Safeguards) into test procedures.
- Assess controls using walkthroughs, configuration reviews, and log analysis; produce clear, actionable findings and remediation recommendations.
- Guide NIST CSF 2.0 maturity assessments and document gaps.
- Serve as audit liaison during external assessments, preparing evidence and managing requests.
- Mentor mid-level and junior auditors on methodologies and standards.
- Track and validate remediation of findings.
- Contribute to team operations, process improvements, and automation efforts.
Requirements
- 8+ years of experience in security/IT audit or technical risk roles, including leading audits independently.
- Knowledge of AWS cloud security and infrastructure-as-code.
- Strong understanding of NIST CSF 2.0, NIST 800-53, PCI DSS, and FTC Safeguards, with practical application experience.
- Experience auditing SDLC, code reviews, CI/CD, and vulnerability management.
- Proficiency with identity providers (e.g., Okta), SSO, and privileged access.
- Experience building teams, processes, and programs from scratch.
- Excellent written communication skills, including the ability to produce executive-level reports.
- Proven mentoring and leadership skills.
- Certifications (CISA, CISSP, CCSP, AWS Security Specialty, QSA) strongly preferred.
- Experience in regulated industries (automotive, industrial, etc.) is a plus.
- Ability to maintain objectivity and strong working relationships with control owners.
Compensation & Benefits
- Non-smoking environment.
- Equal opportunity employer.