IT Audit & Compliance Liaison

About the role

The IT Audit & Compliance Liaison provides technical audit and compliance support within an enterprise Governance, Risk, and Compliance (GRC) program. This role supports internal and external audits, evaluates information technology controls, identifies compliance gaps, coordinates remediation efforts, and develops reporting to strengthen cybersecurity, risk management, and regulatory compliance.

Responsibilities

• Coordinate and support information technology audits conducted by internal and external oversight organizations and regulatory entities.
• Review documentation and technical evidence to determine compliance with applicable laws, regulations, policies, and security standards.
• Evaluate information security and technology controls against established frameworks, including NIST Cybersecurity Framework (CSF), NIST Special Publication 800-53, ISO 27001, and applicable security policies.
• Identify control deficiencies, document findings, and recommend corrective actions to reduce organizational risk.
• Assist business and technical stakeholders in preparing audit responses and collecting supporting evidence.
• Track audit findings, validate corrective actions, and report remediation status and residual risk to management.
• Support the development and maintenance of automated workstreams for audit management, compliance tracking, and evidence collection.
• Develop dashboards, metrics, and executive reports related to audit trends, compliance posture, and remediation progress.
• Perform risk-based assessments to prioritize audit activities and evaluate control effectiveness.
• Assist in developing audit procedures, compliance documentation, metrics, and management reports.
• Participate in continuous improvement initiatives related to governance, risk management, and internal controls.
• Perform related duties as assigned.

Requirements

• Evaluate information security and technology controls against established frameworks, including NIST Cybersecurity Framework (CSF), NIST Special Publication 800-53, and ISO 27001.
• Identify control deficiencies, document findings, and recommend corrective actions to reduce organizational risk.
• Assist business and technical stakeholders in preparing audit responses and collecting supporting evidence.
• Track audit findings, validate corrective actions, and report remediation status and residual risk to management.
• Support the development and maintenance of automated workstreams for audit management, compliance tracking, and evidence collection.
• Develop dashboards, metrics, and executive reports regarding audit trends, compliance posture, and remediation progress.
• Perform risk-based assessments to prioritize audit activities and evaluate control effectiveness.
• Review documentation and technical evidence to determine compliance with applicable laws, regulations, policies, and security standards.

Skills

• Cybersecurity governance and risk management.
• NIST CSF, NIST 800-53, ISO 27001, and related frameworks.