Qualifications

• 5+ years of experience in IT auditing, security analysis, or related fields.
• Proficient in evaluating SOC-1 and SOC-2 reports and internal controls.
• Strong skills in analyzing control gaps for financial systems management.
• Familiarity with NIST 800-53 controls and the Risk Control Matrix development.
• Excellent verbal and written communication, with project management capabilities.
• Must be able to work independently and meet deadlines effectively.
• Certifications like CISSP or CISA are preferred, but not mandatory.

Responsibilities

• Evaluate and develop the technology compliance program and advise management.
• Prepare technology departments for financial audits and internal control reviews.
• Assist in drafting documents for SOX and FISMA compliance.
• Collaborate with team to minimize security vulnerabilities.
• Advise on compliance issues and propose effective solutions.
• Provide weekly status reports detailing risks and project progress.
• Implement GRC tools to enhance automated compliance and auditing processes.
• Review Splunk audit logs and address any identified anomalies.
• Document system compliance requirements for governance.
• Design and validate compliance controls, ensuring accurate documentation.
• Create necessary audit and monitoring reports for team use.

Benefits

• Hybrid work model offering flexibility in location.
• Professional development opportunities to enhance skills.
• Access to advanced tools and technology for auditing.