Position Summary Wipfli is currently seeking a IT Auditor for our Minnesota Region. The position could be located in either our St. Paul or Minneapolis office. The role of the IT Auditor is a staff level role that is a primary resource for performing information technology general controls reviews, Service Organization Controls (SOC) examinations, and other services within the Risk Advisory and Forensics Services (RAFS) group including technical security assessments. The Senior IT Auditor will participate in the delivery of IT examinations, information security risk assessments, SOC examinations, HIPAA compliance reviews, and technical security assessments (perimeter vulnerability assessments, internal vulnerability assessments, penetration testing, etc.) by performing these projects and creating project reports and other deliverable for Wipfli clients. Job Description 34; Performs IT general controls reviews, SOC examinations, and other risk advisory services including technical security assessments. These services will be provided for a variety of clients including financial institutions, health care providers, and IT services organizations. 34; Performs control testing, interprets results, and prepares reports. 34; Helps maintain testing work programs. Qualifications 34; Bachelors degree in Information Security, Information Technology or related discipline, 3-5 years related experience and/or training; or equivalent combination of education and experience in similar role 34; A high level of initiative, strong written and verbal communication skills and business acumen oriented around small to middle market companies 34; Strong organizational skills in coordinating multiple projects/tasks simultaneously, and meeting deadlines 34; Great attention to detail and problem solving skills 34; CISA and/or CISSP certifications are desired 34; Prior experience as a consultant is desired 34; Experience with port scanning, vulnerability assessment and penetration testing tools (e.g., Nmap, Nessus, Metasploit), and manual security testing processes 34; Strong knowledge of Windows Server and Linux systems 34; Strong knowledge of networking and security technologies including routers, switches, firewalls, IDS, anti-virus, protocol analyzers 34; Knowledge of database systems Videos To Watch https://www.youtube.com/watch?v=HxEuYFUSrlU