Information Security Auditor

About the role

KirkpatrickPrice is seeking an IT and security-savvy auditor to join a growing and changing compliance industry. We assist clients—from startups to enterprises—in achieving challenging compliance and security goals through conducting quality testing, delivering an unmatched level of service and interpersonal partnership.

Responsibilities

• Lead the delivery of audits using various tools and technology to assess against frameworks.
• Conduct interviews from C-level executives to network administrators.
• Travel to client locations (30-40% of the time) to perform test procedures and gather evidence.
• Work closely with the professional writing team to deliver high-quality audit reports on time.
• Design effective control tests and interpret how risk impacts diverse business environments.
• Educate clients on applicable compliance standards such as SOC1, SOC2, PCI, HIPAA, FISMA, GLBA, HITRUST, GDPR, and ISO.

Requirements

• 10+ years of technology experience.
• CISSP certification (required).
• Exposure to the audit function of information security, either as a beneficiary or direct auditor.
• Strong ability to write workpapers.
• Experience in application development, cloud technology, and/or networking.
• Exposure to a wide range of security tools.
• Experience coordinating simultaneous projects at different stages.
• Knowledge of compliance standards: SOC1, SOC2, PCI, HIPAA, FISMA, GLBA, HITRUST, GDPR, ISO.

Desired Qualifications

• Certifications in CISA, QSA, CRISC, GIAC, or CPA.

Characteristics

• Extreme level of integrity.
• Passion for teaching clients about compliance standards.
• Unparalleled professionalism in conduct and appearance.
• Self-motivated to work virtually.

Pay

$100,000–$150,000 for full-time employment.