Associate Information Security Auditor - Remote

The Associate Information Security Auditor is part of the Corporate department, which resides on the Information Security team and reports to the Director of Information Security. The Associate Information Security Auditor will partner with other cybersecurity team members to promote the CIS mission and support our growth. The primary purpose of this position is to evaluate, oversee, and support the implementation and operation of audit controls within the organization and measure compliance with internal standards and best practices. What You'll Do Define the required controls to be reviewed per the documentation framework and control implementation strategyReview and assess control implementation and effectiveness in accordance with the organization’s information security program, including privacy and artificial intelligenceActively participate in the information security audit engagements by serving as a liaison between external audit entities and internal teamsCoordinate with CIS business units to evaluate and promote alignment with control requirements, acting as a governance and oversight functionProduce, maintain, and provide control evidence remains with the designated control and evidence ownersDemonstrate understanding of the audit frameworks, audit artifact requests, and quality assurance process to ensure that the artifacts provided meet the applicable criteria, including the ability to recreate the artifactsImplement risk-based monitoring to define risk treatment strategies and align to implemented control effectiveness when performing the reviews of the artifactsAssist with day-to-day operational security to ensure functional alignment with applicable policies, standards, frameworks, laws, and regulationsMonitor security incidents, metrics, account review, and perform incident response as necessary when deviations from expected baselines occurProvide input into new strategies, technologies, and projects within the organization to assure ‘secure by design’, ‘privacy by design’, and adherence to current control requirementsEnsure program level compliance with applicable laws, standards, and guidanceOther tasks and responsibilities as assigned What You'll Need Bachelor’s degree in Computer Science, Cybersecurity, IT Compliance, or related field*1+ years’ experience in IT auditing, security operations, or related positionExperience with the CIS control and compliance evaluation requirements, examples would include (ISO27001, ISO27701, SOC 2, NIST Cybersecurity Framework (CSF), NIST 800-53, NIST 800-171, etc.)Knowledge and application of the CIS Critical Security Controls and MITRE FrameworkThis position requires the individual to be a citizen of the United States of America It's a Plus If You Have Non-Profit experienceContributed to or developed information technology policies, standards, and proceduresExperience performing audit, assessment, or compliance oversight activities and communicating control expectations, findings, and cybersecurity best practices to end users, system administrators, peers, and executive leadershipCISA certificationCOBIT5, FIBF, CJIS or other related frameworks for implementing cybersecurity controlsAdditional years of relevant experience or a combination of an Associate’s degree or equivalent and relevant experience may be substituted for the Bachelor’s degree. At CIS, we are committed to providing an inclusive environment in which the diverse backgrounds, experiences, and views of our employees, members, and customers are valued and respected. It is through this commitment that we are able to work together towards our common mission: to make the connected world a safer place. Compensation Range USD$29.28 - $46.83