IT Compliance Auditor (5-7 yrs)

Job Overview :

We are seeking a highly skilled and experienced IT Compliance Auditor to provide expert guidance to client's information security program. This position will work closely with client's IT team to assess risks, develop security strategies, and have best practices implemented to safeguard our information assets.

Key Responsibilities :

1. Risk Management : Conduct regular risk assessments and vulnerability assessments to identify potential threats and weaknesses in the organization's information systems.

2. Policy Development : Create and implement security policies, standards, and procedures to ensure compliance with applicable laws and regulations.

3. Incident Response : Establish and manage an incident response plan to address security breaches and mitigate risks effectively.

4. Vendor Management : Assess and manage third-party vendors' security practices to ensure compliance with the organization's security standards.

5. Compliance : Ensure compliance adoption with relevant regulations and frameworks (e.g., GDPR, HIPAA, PCI-DSS) and maintain necessary documentation.

6. Collaboration : Collaborate with IT teams to integrate security measures into technology and operational processes.

7. Reporting : Provide regular updates to executive leadership and the board on the organization's security posture, risk assessments, and compliance status.

Qualifications :

1. Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field (Master's preferred).

2. Minimum of 5-7 years of experience in information security, risk management, or related fields.

3. Strong understanding of security frameworks, regulations, and best practices (e.g., NIST, ISO 27001, CIS Controls).

4. Excellent analytical and problem-solving skills, with the ability to think critically and strategically.

5. Strong communication and interpersonal skills, capable of presenting complex information to non-technical stakeholders.

6. Relevant certifications (e.g., CISSP, CISM, CISA, CEH) are highly desirable.