Back to Jobs

Senior IT & Cybersecurity Auditor

Actively Reviewing the Applications

Largeton Group

On-site

Posted 2 days ago • Apply by June 14, 2026

Job Description

Job Summary (List Format) – Senior IT & Cybersecurity Auditor

Plan, execute, and report on IT and cybersecurity audits to evaluate security controls, risk management, and compliance.
Assess effectiveness of cybersecurity controls across identity and access management, network security, endpoint protection, cloud security, and data protection.
Conduct risk assessments and control testing aligned with industry frameworks (NIST CSF, ISO 27001, CIS, COBIT).
Evaluate compliance with regulatory and contractual requirements (SOX, PCI DSS, HIPAA, GDPR, SOC, internal policies).
Review vulnerability management, incident response, disaster recovery, and business continuity processes.
Collaborate with GRC and business stakeholders to understand systems, processes, and compliance needs.
Identify control gaps, root causes, and develop actionable audit findings and recommendations.
Track and validate remediation efforts to ensure timely resolution of audit issues.
Support third-party risk assessments, including vendor security control reviews and SOC report analysis.
Stay updated on evolving regulations and industry best practices to enhance audit processes.
Contribute to continuous improvement of audit methodologies, tools, and automation.
Prepare and present audit results to management and senior leadership/audit committees.
Conduct forensic investigations on cyberattacks to determine cause and prevention strategies.
Resolve complex security issues in decentralized environments and effectively communicate findings.
Minimum 8 years’ experience in IT and cybersecurity audit, risk assessment, compliance, and reporting.
Preferred: CISSP, PMP certifications (minimum 3 years).
Experience with state or government clients is required; references from recent state client projects needed.