cybersecurity auditor

Amazon Web Services (AWS)

<div>
 <strong>
  Description
  <br/>
  <br/>
 </strong>
 We're seeking a meticulous Cybersecurity Auditor to be a pivotal force in AWS's digital transformation journey in Saudi Arabia. You'll craft specialized audit methodologies that bridge global cybersecurity standards with local regulatory landscapes, ensuring AWS remains a trusted cloud partner in the Kingdom.
 <br/>
 <br/>
 Key job responsibilities
 <br/>
 <br/>
 <ul>
  <li>
   Plan and execute internal cybersecurity audits aligned with Saudi requirements
  </li>
  <li>
   Coordinate external audit activities and regulatory inspections
  </li>
  <li>
   Support audit evidence collection and documentation for compliance reviews
  </li>
  <li>
   Track remediation of audit findings and control deficiencies
  </li>
  <li>
   Develop and maintain audit frameworks specific to Saudi regulations
  </li>
  <li>
   Report on audit results and compliance status to leadership
  </li>
  <li>
   Develop and execute long-term regulatory audit projects and initiatives
  </li>
  <li>
   Support metrics, implement data collections mechanisms, analyze audit data and make recommendations
  </li>
  <li>
   Prepare project plans and track audit projects through fruition
  </li>
  <li>
   Manage tight deadlines and drive for results, while being extremely detail orientated
   <br/>
   <br/>
  </li>
 </ul>
 A day in the life
 <br/>
 <br/>
 Your day will be a dynamic blend of strategic audit planning, regulatory compliance exploration, and collaborative problem-solving. You'll navigate complex cybersecurity frameworks, engage with cross-functional teams, and develop innovative approaches to validate security controls.
 <br/>
 <br/>
 <strong>
  About The Team
  <br/>
  <br/>
 </strong>
 Our cybersecurity team is a collaborative network of experts dedicated to protecting cloud infrastructure and building trust. We're committed to advancing technological resilience in Saudi Arabia, working closely with local regulators and global AWS teams to create secure, transformative cloud solutions.
 <br/>
 <br/>
 <strong>
  Basic Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   5+ years of experience in cybersecurity auditing or compliance assessment
  </li>
  <li>
   In-depth knowledge of KSA cybersecurity frameworks like NCA and SAMA regulations
  </li>
  <li>
   Knowledge of cybersecurity control frameworks and audit methodologies
  </li>
  <li>
   Experience with audit documentation and evidence collection
  </li>
  <li>
   Advanced degree in related areas of study (Computer Science, Engineering, Cybersecurity, IT Security Management).
  </li>
  <li>
   Fluency in Arabic and English (written and verbal)
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Highly effective oral, written and interpersonal communication skills; demonstrated ability to effectively and comfortably interact at senior and executive levels.
  </li>
  <li>
   Self-starter with proven track record of successfully working with a wide array of functional groups across an organization and cultures as well as working independently.
  </li>
  <li>
   Strong analytical and critical thinking skills with the ability to use data to back up assumptions, recommendations and drive actions.
  </li>
  <li>
   Ability to investigate and analyze technical and regulatory issues with applicability to cloud services.
   <br/>
   <br/>
  </li>
 </ul>
 Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.
 <br/>
 <br/>
 <br/>
 <strong>
  Company
 </strong>
 - Amazon Web Services Limited Regional Headquarter (One Person Company) - R35
 <br/>
 <br/>
 Job ID: A3140243
</div>


Cybersecurity Auditor, KSA (KSA National Only), AWS Security - FSDC

Dubai Careers - A Smart Dubai Initiative

<div>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 <strong>
  <strong>
   Overall Purpose
   <br/>
   <br/>
  </strong>
 </strong>
 To plan, execute, and deliver IT audit assignments that evaluate the adequacy and effectiveness of IT controls, governance, risk management, and compliance with policies and regulations. The role provides assurance on the security, reliability, and integrity of IT systems and processes, while also supporting business improvement initiatives.
 <br/>
 <br/>
 <strong>
  <strong>
   Key Responsibilities
   <br/>
   <br/>
  </strong>
 </strong>
 <ul>
  <li>
   Lead and conduct risk-based IT audits, including infrastructure, applications, cybersecurity, databases, and IT operations.
  </li>
  <li>
   Evaluate the effectiveness of IT general controls (ITGCs), application controls, and automated business processes.
  </li>
  <li>
   Review IT security practices, access management, and data protection measures.
  </li>
  <li>
   Assess IT governance frameworks, policies, and compliance with international standards.
  </li>
  <li>
   Identify control gaps, risks, and opportunities for improvement, and develop practical recommendations.
  </li>
  <li>
   Prepare clear, concise audit reports and present findings to management.
  </li>
  <li>
   Provide advisory support on new IT initiatives, system implementations, and emerging risks.
  </li>
  <li>
   Mentor junior auditors and provide guidance during assignments.
  </li>
  <li>
   Stay updated on industry trends, emerging technologies, and cybersecurity threats.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <strong>
  <strong>
   Qualifications &amp; Experience:
   <br/>
   <br/>
  </strong>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Information Technology, Computer Science, or related field.
  </li>
  <li>
   Professional certifications (preferred):
  </li>
  <ul>
   <li>
    CIA (Certified Internal Auditor)
   </li>
   <li>
    ACCA (Association of Chartered Certified Accountants)
   </li>
   <li>
    CPA (Certified Public Accountant
   </li>
   <li>
    CA (Chartered Accountant)
   </li>
  </ul>
  <li>
   5&ndash;8 years of IT audit, cybersecurity, or information security experience, with at least 2 years in a senior role.
  </li>
  <li>
   Strong knowledge of IT systems, networks, databases, and ERP systems (e.g., SAP, Oracle).
  </li>
  <li>
   Familiarity with international auditing standards and IT frameworks (ISACA, IIA).
  </li>
  <li>
   Excellent analytical, communication, and report-writing skills.
  </li>
 </ul>
 <strong>
  <strong>
   Key Skills
   <br/>
   <br/>
  </strong>
 </strong>
 <ul>
  <li>
   IT risk assessment &amp; management
  </li>
  <li>
   Cybersecurity and data protection
  </li>
  <li>
   Audit planning &amp; execution
  </li>
  <li>
   Problem-solving and critical thinking
  </li>
  <li>
   Stakeholder management and presentation skills
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Job Category
  <br/>
  <br/>
 </strong>
 Audit
 <br/>
 <br/>
 <strong>
  Advertiser
  <br/>
  <br/>
 </strong>
 Financial Audit Authority
 <br/>
 <br/>
 <strong>
  Educational-level
  <br/>
  <br/>
 </strong>
 Bachelor
 <br/>
 <br/>
 <strong>
  Required Nationality
  <br/>
  <br/>
 </strong>
 UAE Only
 <br/>
 <br/>
 <strong>
  Monthly Salary
  <br/>
  <br/>
 </strong>
 Unspecified
 <br/>
 <br/>
 <strong>
  Schedule-Time
  <br/>
  <br/>
 </strong>
 Full time
 <br/>
 <br/>
 <strong>
  Job Posting
  <br/>
  <br/>
 </strong>
 18/03/2026
 <br/>
 <br/>
 <strong>
  Unposting Date
  <br/>
  <br/>
 </strong>
 17/04/2026
</div>


Senior IT Auditor

HugoBank

<div><p>The IT &amp; GRC Auditor will be responsible for strengthening the Bank&rsquo;s technology risk management, cybersecurity, and governance framework. The role includes conducting risk-based IT audits, reviewing internal controls, and assessing compliance with regulatory, data protection, and information security requirements across digital banking systems, cloud environments, IT operations, and GRC processes.</p><p><b><br>
Essential Duties and Responsibilities</b></p><ul><li>
Develop, maintain, and periodically update the IT &amp; Information Security audit universe, ensuring comprehensive coverage of technology risks across the Bank.</li><li>
Perform periodic risk assessments and prepare risk-based audit plans, ensuring high-risk and regulatory-critical areas are prioritized.</li><li>
Lead and execute end-to-end IT and GRC audits, including cybersecurity, digital banking platforms, application controls, IT infrastructure, cloud environments, and third-party/vendor risk management, in accordance with approved audit methodology and Internal Auditing Standards.</li><li>
Evaluate the effectiveness of IT governance, policies, processes, and internal control frameworks; identify control gaps and provide practical, risk-based recommendations.</li><li>
Assess compliance with Central Bank regulations, applicable laws, industry standards, and internal governance frameworks related to technology and information security.</li><li>
Prepare high-quality audit working papers and reports that are clear, concise, objective, and timely, ensuring audit engagements are delivered within agreed timelines and resource budgets.</li><li>
Monitor and report on the status of audit findings and management action plans, including tracking overdue items and performing follow-up reviews to validate remediation effectiveness.</li><li>
Undertake special reviews, investigations, advisory and assurance assignments as directed by the Chief Audit Executive.</li></ul><br>
<b>
Requirements</b><br>
<ul><li>
Bachelor&rsquo;s in Computer science or a related field. Master&rsquo;s degree preferred.</li><li>
Professional Certifications such as CISA, CRISC, CISSP, CISM or CCSP.</li><li>
6&ndash;8 years of experience in IT Audit, Technology Risk, or Information Security within a bank, financial institution, fintech, or other regulated environment, with exposure to digital systems and technology-driven operations.
</li><li>Hands-on experience in conducting risk-based IT audits covering cybersecurity, IT general and application controls, cloud environments, third-party risk, and regulatory compliance, including audit planning, documentation, reporting, and follow-up in line with professional auditing standards.</li></ul></div>

IT & GRC Auditor

<div>
 The IT &amp; GRC Auditor will be responsible for strengthening the Bank's technology risk management, cybersecurity, and governance framework. The role includes conducting risk-based IT audits, reviewing internal controls, and assessing compliance with regulatory, data protection, and information security requirements across digital banking systems, cloud environments, IT operations, and GRC processes.
 <br/>
 <br/>
 <strong>
  Essential Duties And Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Develop, maintain, and periodically update the IT &amp; Information Security audit universe, ensuring comprehensive coverage of technology risks across the Bank
  </li>
  <li>
   Perform periodic risk assessments and prepare risk-based audit plans, ensuring high-risk and regulatory-critical areas are prioritized
  </li>
  <li>
   Lead and execute end-to-end IT and GRC audits, including cybersecurity, digital banking platforms, application controls, IT infrastructure, cloud environments, and third-party/vendor risk management, in accordance with approved audit methodology and Internal Auditing Standards
  </li>
  <li>
   Evaluate the effectiveness of IT governance, policies, processes, and internal control frameworks; identify control gaps and provide practical, risk-based recommendations
  </li>
  <li>
   Assess compliance with Central Bank regulations, applicable laws, industry standards, and internal governance frameworks related to technology and information security
  </li>
  <li>
   Prepare high-quality audit working papers and reports that are clear, concise, objective, and timely, ensuring audit engagements are delivered within agreed timelines and resource budgets
  </li>
  <li>
   Monitor and report on the status of audit findings and management action plans, including tracking overdue items and performing follow-up reviews to validate remediation effectiveness
  </li>
  <li>
   Undertake special reviews, investigations, advisory and assurance assignments as directed by the Chief Audit Executive
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's in Computer science or a related field. Master's degree preferred
  </li>
  <li>
   Professional Certifications such as CISA, CRISC, CISSP, CISM or CCSP
  </li>
  <li>
   6-8 years of experience in IT Audit, Technology Risk, or Information Security within a bank, financial institution, fintech, or other regulated environment, with exposure to digital systems and technology-driven operations.
  </li>
  <li>
   Hands-on experience in conducting risk-based IT audits covering cybersecurity, IT general and application controls, cloud environments, third-party risk, and regulatory compliance, including audit planning, documentation, reporting, and follow-up in line with professional auditing standards
  </li>
 </ul>
</div>


MetLife

<div><div><div><div><div><div>Location(s)
</div><div><ul><li>Posting Location: Cary, North Carolina</li></ul><br>
</div></div></div></div></div><div><div><div><div><div>City/Cities
</div><div>Cary
</div></div><div><div>Region/States
</div><div>North Carolina
</div></div><div><div>Country
</div><div>United States
</div></div><div><div>Working Schedule
</div><div>Full-Time
</div></div><div><div>Work Arrangement
</div><div>Hybrid
</div></div><div><div>Travel Required
</div><div>10%
</div></div><div><div>Relocation Assistance Available
</div><div>No
</div></div><div><div>Posted Date
</div><div>18-Mar-2026
</div></div><div><div>Job ID
</div><div>16319
</div></div></div></div></div><div><div><div><h3 class="jobSectionHeader"><b>Description and Requirements
</b></h3></div></div><div><div><div><div><div><b>The Team You Will Join</b></div><div><p>
Internal Audit (IA) is an independent global organization that partners with the business to help ensure that management anticipates, recognizes, and appropriately manages risks. IA provides independent assurance and advice while advocating for strong risk management and internal controls.</p></div><p><br>
</p><div><b>
The Opportunity</b></div><div><p>
The Senior IT Auditor is part of a highly collaborative team and supports audit activities across technology domains including application reviews. cybersecurity, IT risk management, enterprise architecture, infrastructure, and vendor management.</p></div><div><div>
Success in this role requires strong audit execution skills and clear, confident communication, paired with an analytical mindset and comfort working across technology domains (e.g., IT risk, cybersecurity, cloud, applications, infrastructure).</div><div>
</div><div>
The Senior IT Auditor is responsible for executing and documenting IT audit testing (including issue remediation testing) and assessing the soundness, adequacy, and compliance of IT processes, risks, and controls in alignment with MetLife policy and leading practices.</div><div>
</div><div>
You&rsquo;ll collaborate closely with Internal Audit team members, audit stakeholders, and auditees/business management in an environment where every contribution is respected, and every perspective is heard.</div></div><p><b>
How You&rsquo;ll Help Us Build a Confident Future (Key Responsibilities)</b></p><div><div><b>
Lead</b> assigned portions of audit engagements by driving your testing responsibilities forward&mdash;executing walkthroughs, sampling, control testing, and drawing conclusions with professional skepticism.<br>
<b>Create</b> high‑quality audit documentation and deliverables, including well‑supported workpapers that meet Internal Audit quality and professional standards.<br>
<b>Oversee</b> your evidence requests and follow‑ups by organizing, tracking, and validating audit support from auditees to keep work moving efficiently.<br>
<b>Manage</b> timely communication with IA peers and stakeholders&mdash;raising risks, barriers, or scope considerations early and escalating appropriately to keep projects on track.<br>
<b>Develop</b> your expertise across a broad IT audit landscape (e.g., cybersecurity, IT risk management, enterprise architecture, applications, infrastructure, vendor management) to support evolving audit coverage needs.</div></div><p><b>
What You Need to Succeed (Required Qualifications)</b></p><div><div><ul><li><b>
2&ndash;4 years of IT internal or external audit experience</b> to effectively execute testing, document results, and support audit and remediation validation work end‑to‑end. Equivalent experience in IT Governance, Risk and Compliance (GRC) domains such as information security, change management or risk management will be considered towards the expected years of experience.</li><li><b>
IT General Controls (ITGC) knowledge</b> (e.g., security, change management, disaster recovery/backup, infrastructure) to evaluate control design and operating effectiveness in real environments.</li><li><b>
SDLC/Agile, cybersecurity, and cloud understanding</b> to assess risk and controls across modern delivery and hosting models.</li><li><b>
Audit frameworks familiarity</b> (e.g., IIA, COBIT, NIST, SOX, PCI DSS) and the ability to apply them when assessing governance, risk, and control expectations.</li><li><b>
Strong communication skills and an effective work style</b>&mdash;including writing, verbal communication, listening/interviewing, and proactive escalation to resolve barriers.</li><li><b>
A collaborative, growth‑oriented mindset</b> with comfort sharing ideas, building relationships, and delivering high‑quality outcomes with others.</li></ul></div></div><p><b>
What Can Give You an Edge (Additional Skills)</b></p><div><ul><li><div>
Suggested <b>1&ndash;2 years of experience in information security, Application Support or equivalent IT/network management</b> to deepen your effectiveness on specialized technology reviews.</div></li><li><div><b>
Certifications (in progress or willingness to pursue): CISA, CIA, CISM or CISSP</b>, strengthening your audit credibility and technical depth.</div></li><li><div><b>
Financial services industry experience</b>, supporting faster context-building and sharper risk judgment in a regulated environment.</div></li><li><div><b>
An AI and data‑curious, improvement‑minded approach</b>&mdash;using analytics and AI tools and available data to draw stronger control conclusions and focus effort where risk is highest.</div></li></ul></div><div>
</div>
</div></div><div><div><div>Location Expectation: This is a hybrid role<b> requiring a minimum of 3 days per week </b>in office.</div>
</div></div><div><div><div>The expected salary range for this position is $85,000 - $105,000. This role may also be eligible for annual short-term incentive compensation. All incentives and benefits are subject to the applicable plan terms.</div>
</div></div></div></div></div><div><div><div><div><div><b>Benefits We Offer</b><div><br>
Our U.S. benefits address holistic well-being with programs for physical and mental health, financial wellness, and support for families. We offer a comprehensive health plan that includes medical/prescription drug and vision, dental insurance, and no-cost short- and long-term disability. We also provide company-paid life insurance and legal services, a retirement pension funded entirely by MetLife and 401(k) with employer matching, group discounts on voluntary insurance products including auto and home, pet, critical illness, hospital indemnity, and accident insurance, as well as Employee Assistance Program (EAP) and digital mental health programs, parental leave, volunteer time off, tuition assistance and much more!</div>
</div></div><div><div><b>About MetLife</b><div><p><br>
Recognized on Fortune magazine's list of the &quot;World's Most Admired Companies&quot;, Fortune World&rsquo;s 25 Best Workplaces&trade;, as well as the Fortune 100 Best Companies to Work For&reg;, MetLife, through its subsidiaries and affiliates, is one of the world&rsquo;s leading financial services companies; providing insurance, annuities, employee benefits and asset management to individual and institutional customers. With operations in more than 40 markets, we hold leading positions in the United States, Latin America, Asia, Europe, and the Middle East.
</p><p></p><p>Our purpose is simple - to help our colleagues, customers, communities, and the world at large create a more confident future. United by purpose and guided by our core values - Win Together, Do the Right Thing, Deliver Impact Over Activity, and Think Ahead - we&rsquo;re inspired to transform the next century in financial services. At MetLife, it&rsquo;s #AllTogetherPossible. Join us!</p></div><br>
</div></div></div></div></div><div></div><div><div><div><div><div><br>
<i>MetLife is an Equal Opportunity Employer. All employment decisions are made without regards to race, color, national origin, religion, creed, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, age, disability, marital or domestic/civil partnership status, genetic information, citizenship status (although applicants and employees must be legally authorized to work in the United States), uniformed service member or veteran status, or any other characteristic protected by applicable federal, state, or local law (&ldquo;protected characteristics&rdquo;).</i><div></div><div><i><br>
If you need an accommodation due to a disability, please email us at accommodations@metlife.com. This information will be held in confidence and used only to determine an appropriate accommodation for the application process.</i><br>
<br>
<i>MetLife maintains a drug-free workplace.</i></div>
</div></div><div><div>$85,000 - $105,000</div></div></div></div></div></div>

Optum

<div><p>Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start <b>Caring. Connecting. Growing together.</b></p><p></p><p><br>
The Info Security Risk Auditor is responsible for supporting and enforcing information security policies, standards, and procedures to safeguard proprietary, personal, and privileged electronic data. This role works closely with user departments and cross-functional teams to implement robust security controls, drive compliance, and foster a culture of security awareness.</p><p></p><p><b><br>
Primary Responsibilities:</b></p><ul><li><b>
Risk &amp; Governance</b><ul><li>
Align security policies and standards with IT infrastructure frameworks (ISO 27001, NIST, ITIL)</li><li>
Lead policy exception and risk management, including logging, assessment, and mitigation</li><li>
Conduct vendor tier assessments, clarify tiering logic, and ensure correct application of security reviews</li><li>
Oversee remediation of critical/high vulnerabilities, verify aging data, and confirm with SLOs on unresolved exploits</li><li>
Support overall application security governance</li></ul></li><li><b>
Compliance &amp; Certification</b><ul><li>
Ensure compliance with regulatory requirements (ISO 27001, NYDFS, NIST)</li><li>
Lead and support ISO 27001/ISMS program implementation and audits for assigned geographies/scope</li><li>
Maintain and update compliance trackers, dashboards, and reporting frameworks</li><li>
Perform audits to identify control gaps and implement corrective action plans</li><li>
Monitor compliance with corrective actions and address non-compliance issues</li><li>
Review and attest security attributes for applications, including MFA, orientation, data type, and access provisioning</li></ul></li><li><b>
Incident Management &amp; Investigation</b><ul><li>
Facilitate and lead security incident investigations, including physical security, fire safety, access control, and environmental controls</li><li>
Ensure proper logging and escalation of incidents</li><li>
Coordinate with other teams for incident related activities</li></ul></li><li><b>
Security Awareness &amp; Training</b><ul><li>
Drive security awareness campaigns, training, and infographics for employees and contractors</li><li>
Track and report on training completion rates, phishing metrics, and awareness initiatives</li><li>
Develop and communicate security content, including videos and best practices</li></ul></li><li><b>
Stakeholder Engagement &amp; Communication</b><ul><li>
Communicate professionally with stakeholders and end users through multiple channels</li><li>
Collaborate with business, and other concerned teams for regulatory reporting and audit support</li><li>
Provide consulting and support for customer audits, contract reviews, and acquired entity compliance</li></ul></li><li><b>
Physical Security &amp; Site Compliance</b><ul><li>
Conduct physical compliance walks, assess fire safety, access control, secure printing, and data privacy at sites</li></ul></li></ul><p></p><p><b><br>
*** ENGLISH PROFICIENCY ASSESSMENT WILL BE REQUIRED AFTER APPLICATION ***</b></p><p></p><p><br>
You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.</p><p><b>
Required Qualifications:</b></p><ul><li>
8+ years of information security experience</li><li>
Experience with ISO27001 (ISMS), HITRUST CSF, NIST Cybersecurity Framework, SOC Type1/2</li><li>
Professional proficiency both with English and Spanish</li><li>
Proven auditing skills and ability to manage risk assessments/projects independently</li><li>
Proven excellent verbal and written communication skills</li><li>
Proven solid presentation skills, especially the ability to explain technology to non-technical personnel</li><li>
Demonstrated ability to work independently, meet deadlines, and maintain stakeholder confidence</li></ul><p></p><p><b><br>
Preferred Qualifications:</b></p><ul><li>
Certifications: CISSP, CISA, ISO27001 Lead Implementer or Lead Auditor</li><li>
Experience in physical security, compliance walks, and site-level assessments</li></ul><p></p><p><i><br>
At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.</i></p><p></p><p><i><br>
UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.</i></p><p></p><p><i><br>
UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment.</i></p></div>

IT Auditor - San Juan, PR

United States Capitol Police

<div><div><h2 class="jobSectionHeader"><b>Summary</b></h2>
<p>The United States Capitol Police (USCP) safeguards the Congress, Members of Congress, employees, visitors, and Congressional buildings and grounds from crime, disruption, and terrorism. We protect and secure Congress so it can fulfill its constitutional and legislative responsibilities in a safe, secure and open environment.</p></div></div>
<br><div><div><h2 class="jobSectionHeader"><b>This job is open to</b></h2>
</div><div><div><div><h3 class="jobSectionHeader"><b>The public</b></h3>
</div><div>U.S. Citizens, Nationals or those who owe allegiance to the U.S.
</div></div></div><h3 class="jobSectionHeader"><b>Clarification from the agency</b></h3>
<p>Navigate to the following URL to apply to this job: &lt;a href=&quot;https://uscp.csodfed.com/ux/ats/careersite/1/home?c=uscp&amp;source=USA&quot;&gt;USCP Careers&lt;/a&gt;</p></div>
<br><div><div><h2 class="jobSectionHeader"><b>Duties</b></h2>
</div><p></p><p>Responsibilities</p><p>
As an Information Technology (IT) Auditor within the OIG Audits Division, the incumbent will help USCP effectively and efficiently carry out its vital mission of protecting and securing Congress so it can fulﬁll its constitutional and legislative responsibilities in a safe, secure, and open environment. The selected candidate will plan, conduct, analyze, and report to the Assistant Inspector General for Audits (AIGA) on a variety of audits, inspections, evaluations, and reviews of USCP&rsquo;s complex information systems infrastructure and data to verify that its information resources provide the highest level of security, reliability, and value expected by stakeholders. The audits conducted may involve ﬁnancial records and systems or consist of activities to review and evaluate the performance of an entity&rsquo;s assigned functions or activities involved in the detection of waste, fraud, and abuse.<br>
The assignments typically involve interrelationships between and among programs, systems, functions, policies, and various issues. The incumbent represents the OIG before USCP officials, the Capitol Board Police, Congressional staff, the Council of Inspectors General on Integrity and Efficiency, and the public at large.<br>
<br>
Primary duties include:<br>
<br>
Comprehensively planning, conducting, analyzing, and reporting on complex IT systems, applications, and infrastructure through audits, inspections, evaluations, or reviews.</p><p>
Evaluating IT governance, risk management, internal control frameworks, cybersecurity measures, and compliance with regulations and best practices.</p><p>
Identifying vulnerabilities and recommending improvements to strengthen security and operational efficiency.</p><p>
Following recommendations through corrective actions, remediation, and closure.
</p><p>Analyzing the development, implementation, acquisition, security, and internal controls of IT networks, systems, and applications particularly as they relate to the use of IT in USCP operations and mission support activities.</p><p>
Independently conducting multiple technically complex engagements concurrently.</p><p>
Coordinating with and leveraging off knowledge and work performed by USCP OIG auditors, inspectors, evaluators, and investigators.</p><p>
Resolving issues encountered in the engagements where the governing laws and/or regulations require interpretation and/or the precedents are non-existent, obscure, or conﬂicting.</p><p>
Writing reports and work papers that support ﬁndings and recommendations for improvement in USCP programs and activities.</p><p>
Supporting or leading meetings with USCP officials, including interviews and presentations of audit ﬁndings, conclusions, and recommendations.</p><p>
Providing technical and policy direction and guidance to team members and within the OIG.</p></div><p></p>
<br><div><div><h2 class="jobSectionHeader"><b>Requirements</b></h2>
</div><h3 class="jobSectionHeader"><b>Conditions of employment</b></h3>
<p>You must be a U.S. Citizen Successful completion of a background investigation is required. Must complete a one-year probationary period. Must have Direct Deposit. Must be able to obtain and maintain a Top Secret Clearance. This position is ELIGIBLE for telework as determined by the OIG policy. *THIS IS NOT A REMOTE POSITION*
</p><h3 class="jobSectionHeader"><b>Qualifications</b></h3>
<p></p><p>In order to qualify, you must meet the education and/or experience requirements described below.</p><p>
Meet the minimum basic education and/or experience requirements described in the Education section below.</p><p>
Have at least one year of specialized experience equivalent to one level below this position you are applying for, which is in or directly related to the line of work of the position to be ﬁlled and which has equipped you with the knowledge, skills, and abilities to successfully perform the duties of the position. Specialized experience is deﬁned as experience performing accounting, IT auditing, auditing, ﬁnancial, or compliance work by planning, conducting audit assignments, and reporting results.</p><p>
Demonstrate excellent analytical and critical thinking skills, including the ability to identify key issues and associated root causes, propose thorough IT audit engagements, plan and execute technical audits according to applicable standards, and draw appropriate conclusions.</p><p>
Demonstrate excellent writing skills including an ability to synthesize information and produce reports that are clear, concise, accurate, and objective.</p><p>
Demonstrate excellent verbal communication skills, including the ability to articulate complex information, collect information from interviews, and customize the information presented to the audience.<br>
<br>
<b>*Salary will be commensurate with qualiﬁcations and experience*</b><br>
<br>
Highly Desired Skills<br>
<br>
Experience conducting or overseeing information technology, ﬁnancial statement, or<br>
performance audits.<br>
Information Technology (IT) Auditing experience. Advanced degree in relevant ﬁelds for this position Possess a current, relevant professional certiﬁcation Certiﬁed Information Systems Auditor (CISA)<br>
Certiﬁed Information Systems Security Professional (CISSP) Certiﬁed Ethical Hacker (CEH)<br>
Certiﬁed Public Accountant (CPA) Certiﬁed Internal Auditor (CIA) Certiﬁed Fraud Examiner (CFE)<br>
Certiﬁed Government Financial Manager (CGFM)<br>
All eligibility requirements must be met by the closing date of the vacancy announcement.</p><p>
(Information on Qualification &amp; Education is located at the following link: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/)</p>
<p></p><div><h3 class="jobSectionHeader"><b>Education</b></h3>
<p>You must meet the minimum basic educational and/or work experience requirements: 1. Bachelor's degree in information technology, information systems, information security, computer science, management information systems, cybersecurity, other IT relevant degrees, auditing, accounting, or a degree in a related ﬁeld such as business administration, ﬁnance, or public administration that included or was supplemented by 24 credit semester hours or equivalent in auditing or accounting. Or 2. At least four years of experience in accounting, IT auditing, auditing, or an equivalent combination of accounting/auditing experience, college-level education, and training that included 24 credit semester hours or equivalent in accounting, auditing, or IT-related courses.
</p></div><div><h3 class="jobSectionHeader"><b>Additional information</b></h3>
<div><div><p>Additional Conditions of Employment with the USCP: As per the Congressional Accountability Act (CAA) and the Fair Chance to Compete for Jobs Act of 2019, criminal history information will only be collected following a qualifications review and after a tentative offer of employment has been made. A criminal history does not automatically exclude an applicant from employment with the USCP. Criminal History Check - Must successfully pass a comprehensive criminal history check of the past 10 years if offered employment. A criminal history check will be performed on applicants who accept an offer of employment. Credit Check - Must successfully pass a credit check. Applicants must not be in default or delinquent on any Federal guaranteed student loans. Applicants must demonstrate a competent financial history. Financial delinquency including collection accounts, liens, repossessions, or garnishments may be a basis for disqualification. Selective Service Registration - Male applicants must provide verification of registration with the Selective Service System or must verify exemption from the Selective Service System registration because of age or military status. Female applicants are exempt from Selective Service System registration. https://www.sss.gov/verify/ Fingerprint Check - Applicants' fingerprints will be submitted to the Federal Bureau of Investigation (FBI) for a check of their criminal history record. Background Investigation - Must successfully complete all components of the USCP full field background investigation. There are few automatic grounds for rejection in the USCP background investigation process. Issues of misconduct, such as illegal drug use, arrests, or convictions, may not be automatically disqualifying. However, deliberate misstatements, omissions, or intentionally withholding required information at any phase of the hiring process will result in a candidate's disqualification regardless of the nature or reason for the misstatement or omission. The primary reason candidates fail a background investigation is due to deliberately withholding or omitting material facts. Providing false and/or misleading information may be grounds for removal from the application and selection process.</p></div></div><br>
<p></p>
<p>Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.</p>
</div><div><div><div><div><div><h1 class="jobSectionHeader"><p>Benefits</p></h1></div></div><div>
<p>A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
</p><p></p><div><p>Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.</p></div></div></div></div></div></div>
<br><div><h2 class="jobSectionHeader"><b>How you will be evaluated</b></h2>
<p>You will be evaluated for this job based on how well you meet the qualifications above.</p>
<p>Evaluation Factors: Please address all Knowledge, Skills and Abilities (KSAs) within the narrative responses so that your experience can be evaluated properly. We will review your resume, assessment questionnaire, and supporting documentation to determine if you meet the minimum requirements for this job. If you meet the minimum requirements for this job, we will evaluate your application materials to assess the quality, depth, and complexity of your qualifications, accomplishments, experience, and education as they relate to the requirements listed in this vacancy announcement. Failure to successfully pass a full field background investigation and all segments of the pre-employment evaluation process will result in disqualification from further consideration under this vacancy announcement.</p></div>
<br><div><div><h2 class="jobSectionHeader"><b>Required Documents</b></h2>
</div><p>The following documents are required and must be received by the closing date of this announcement: 1. Your resume: Effective September 27, 2025, resume page limit is two (2) pages and should include a description of related job duties as well as dates of employment (mm/yy). Margins cannot be smaller than .5 all around and the font no smaller than 11-point. 2. Other supporting documents: - Veterans Preference Documentation, if applicable. - College transcript(s), if qualifying based on education, or other documentation to prove possession of the basic requirements for this position.
</p>
<div><h3 class="jobSectionHeader"><b>If you are relying on your education to meet qualification requirements:
</b></h3><p>Education must be accredited by an accrediting institution recognized by the U.S. Department of Education in order for it to be credited towards qualifications. Therefore, provide only the attendance and/or degrees from schools accredited by accrediting institutions recognized by the U.S. Department of Education.
</p><p>Failure to provide all of the required information as stated in this vacancy announcement may result in an ineligible rating or may affect the overall rating.</p></div></div>
<br><div><div><h2 class="jobSectionHeader"><b>How to Apply</b></h2>
</div><div><div><p>Navigate to the following URL to apply to this job: USCP Careers 1. Follow the prompts to upload your resume and/or other supporting documents and complete the occupational questionnaire. 2. Click the Submit Application button to submit your application package. 3. It is your responsibility to ensure your responses and appropriate documentation are submitted prior to the closing date. 4. To verify that your application is complete, log into your account and select the job posting for this position. The page will display the status of your application, the documentation received, and any correspondence the Department has sent related to this application. 5. Failure to provide all required documents and information requested by the closing date of this announcement may result in your application not being considered. The complete application package must be submitted by 7:59 PM (ET) on the closing date to receive consideration.</p></div><p><br>
</p></div>
<div><h3 class="jobSectionHeader"><b>Agency contact information</b></h3>
<div></div><div><div><div>Email</div>
<div>yetreta.washington@uscp.gov
</div></div><div><div>Address</div>
<div><div><i>Office of Inspector General</i><br>
<i>119 D Street NE</i><br>
<i>Washington, DC 20510</i><br>
<i>
</i></div></div></div></div></div><h3 class="jobSectionHeader"><b>Next steps</b></h3>
<div><div><p>After a review of your application materials is made, you will be notified of your eligibility status. If you are referred to the hiring official, you will receive further notification. If further evaluation or interviews are required, you will be contacted. Please note that if you are not selected for this position, the USCP may not be able to provide specific feedback or disclose the reasons for your disqualification, due to confidentiality and legal considerations related to the hiring process.</p></div></div></div><p></p>
<br><div><div><h2 class="jobSectionHeader"><b>Overview</b></h2>
</div><div><div>Accepting applications</div>
<div><div>Open &amp; closing dates</div>
 <div>03/19/2026 to 03/27/2026
</div></div><div><div>Salary</div>
<div>$132,243 to - $189,308 per year
</div></div><div><div>Pay scale &amp; grade</div>
<div>CP 10 - 11</div>
</div><div><div>Location</div>
<div>1 vacancy in the following location:</div>
 <div><div><div><div>Washington, DC
</div><div>1 vacancy</div>
</div></div></div></div><div></div><div><div>Telework eligible</div>
<div>Yes&mdash;as determined by the agency policy.</div>
</div><div><div>Travel Required</div>
<div>Occasional travel - Travel may be required.</div>
</div><div><div>Relocation expenses reimbursed</div>
<div>NoN/A
</div></div><div><div>Appointment type</div>
<div>Permanent</div>
</div><div><div>Work schedule</div>
<div>Full-time</div>
</div><div><div>Service</div>
<div>Excepted</div>
</div><div><div>Promotion potential</div>
<div>11
</div></div><div><div>Job family (Series)</div>
<ul><li>0511 Auditing
</li></ul></div><div><div>Supervisory status</div>
<div>No</div>
</div><div><div>Security clearance</div>
<div>Sensitive Compartmented Information</div>
</div><div><div>Drug test</div>
<div>No</div>
</div><div></div><div><div>Announcement number</div>
<div>req719</div>
</div><div><div>Control number</div>
<div>861873800</div></div></div></div>

OIG IT Auditor

Search 1962+ Cybersecurity auditor jobs near you this March. New roles added regularly across leading industries. Apply today.

1962 cybersecurity auditor jobs Near Me

Cybersecurity Auditor, KSA (KSA National Only), AWS Security - FSDC

Senior IT Auditor

IT & GRC Auditor

IT & GRC Auditor

Senior IT Auditor

IT Auditor - San Juan, PR

OIG IT Auditor