Key Responsibilities
Plan, lead, and execute risk‑based IT audits and advisory reviews covering technology processes, systems, and operations across a global, software‑centric organization.
Evaluate the design and operating effectiveness of IT and information security controls, with emphasis on cloud infrastructure, data platforms, SaaS applications, and enterprise technologies.
Develop clear, well‑structured audit programs, workpapers, and supporting documentation in accordance with IIA standards.
Assess compliance with relevant information security, regulatory, and industry standards, including but not limited to PCI‑DSS, ISO 27001/27002, NIST, FedRAMP, and other applicable requirements.
Apply established risk frameworks (e.g., NIST Risk Management Framework) to identify control gaps, assess residual risk, and evaluate mitigation strategies.
Assess whether security and technology controls adequately safeguard data, including customer, confidential, and personal information.
Prepare concise, high‑quality audit reports that clearly articulate observations, root causes, risk implications, and recommendations.
Act as a trusted advisor by providing insights on control design, process improvements, and emerging technology risks.
Demonstrate strong communication and influencing skills when presenting findings, facilitating discussions, and driving alignment on remediation.
Who You’ll Work With
You will partner with technology, security, and business teams to
Identify and assess key technology risks
Establish clear risk ownership and accountability
Develop realistic and prioritized management action plans
What Makes You a Qualified Candidate
3+ years of experience in IT audit, information security, risk management, or internal/external audit.
Bachelor’s degree in Computer Science, Information Technology, Information/Cyber Security, or a related business discipline from an accredited institution.
Working knowledge of IT risk and control frameworks (e.g., NIST RMF, NIST CSF, CIS Critical Security Controls).
Strong understanding of cloud computing architectures and related security and governance controls.
Knowledge of internal audit standards and practices (Institute of Internal Auditors).
Experience performing risk assessments, audit planning, control testing, and issue validation.
Familiarity with global data protection and privacy regulations (e.g., GDPR, CCPA).
General understanding of enterprise technologies, including operating systems, databases, networks, and applications.
Ability to collaborate effectively with stakeholders across geographies and disciplines.
Fluency in English (reading, writing, and speaking).
Willingness and ability to travel up to 10% annually, including internationally.
Strong interpersonal presence with the ability to build credibility and effective working relationships across technical and non‑technical teams.
Clear, professional written and verbal communication; able to tailor messaging to different audiences.
Analytical mindset with sound judgment and attention to detail.
Comfortable operating in a dynamic, fast‑paced technology environment with changing priorities.
Ability to independently manage multiple workstreams while maintaining quality and timelines.
What You’ll Bring
Professional certification such as CIA, CISA, CISM, CISSP, or similar.
Experience auditing cloud‑native, SaaS, or data analytics platforms in a large‑scale enterprise environment.
Prior experience in a software or technology‑focused company with global operations.
This role is remote‑based, with potential travel to corporate offices (San Diego, Atlanta) and/or audit locations.
Expected travel is expected to be less than 5% annually
#LI-VM1