IT Auditor

Job Summary

To support compliance initiatives, the full-time salaried IT Auditor will maintain and advance information security compliance across PCI DSS, SOC 2 Type 2, and GovRAMP while working remotely within the continental United States.

Key responsibilities

• Own day-to-day compliance execution for PCI DSS, SOC 2 Type 2, and GovRAMP, including audit preparation and remediation tracking
• Conduct internal audits and control assessments, producing formal reports with findings and prioritized recommendations for improvement
• Partner with all departments to educate staff on compliance requirements and hold department heads accountable to their compliance obligations

Required qualifications

• 4-6 years of experience in IT audit, information security compliance, or GRC, ideally across multiple frameworks (PCI DSS, SOC 2, GovRAMP/FedRAMP)
• GovRAMP or FedRAMP experience strongly preferred
• Familiarity with NIST 800-53 controls and their application to GovRAMP/FedRAMP authorization
• Security certification such as CISA, CISSP, or CISM (CISA preferred)
• Bachelor's degree in Information Systems, Computer Science, Business, or related field, or equivalent experience