Staff Auditor - Cybersecurity

Job Summary

Performing third-party information security assessments, the full-time remote Staff Auditor - Cybersecurity will utilize established IT risk assessment frameworks to identify control gaps and provide remediation recommendations while preparing assessment reports for cross-functional audiences.

Key responsibilities

• Conduct third-party information security assessments and prepare detailed reports on findings
• Engage with business units and third parties to address and remediate identified control gaps
• Coordinate with various functions, including security, sourcing, legal, and compliance, to enhance overall third-party security posture

Required qualifications

• Bachelor's Degree in Computer Science or a STEM major with at least 6 years of relevant experience in the USA or advanced experience for roles outside the USA
• Internationally recognized information security or IT audit certification such as CISSP, CISA, or equivalent
• Experience performing IT audits or security assessments of third-party suppliers in regulated environments
• Strong understanding of information security and IT governance standards (e.g., COBIT, ISO, NIST)
• Proven ability to work cross-functionally and influence stakeholders in a matrixed organization