cybersecurity auditor

Mountain America Credit Union

<p></p><div><h1 class="jobSectionHeader"><b>Please reference the schedule and minimum qualifications listed below before applying.</b></h1><p></p><p>
If you need assistance with filling out our application form or during any phase of the application, interview, or employment process, please notify our Human Resources Team at 801-366-6947 option 1 or email macurecruiting@macu.com and every reasonable effort will be made to accommodate your needs in a timely manner.</p><p></p><h1 class="jobSectionHeader"><b>
Job Summary</b></h1>
To perform audits and reviews, and to review, test, and assess control environment to help safeguard credit union assets.<p></p><h1 class="jobSectionHeader"><b>
Job Description</b></h1><p><b>
LOCATION</b></p><p>
Mountain America Center - Hybrid:</p><p>
9800 S Monroe St<br>
Sandy, UT 84070</p><p></p><p><b>
SCHEDULE</b></p><ul><li>This is a Hybrid Schedule- this team is in office 3 days a week (Tuesday, Wednesday, and Thursday) with 2 days remote (Monday and Friday)</li></ul><p></p><div><div><p><b>
Key Responsibilities</b></p></div><div><ul><li><p>
Lead and perform audits of IT systems, applications, infrastructure, and cybersecurity processes.</p></li></ul></div><div><ul><li><p>
Execute all phases of the audit lifecycle, including planning, process walkthrough, risk assessment, fieldwork testing, and reporting.</p></li></ul></div><div><ul><li><p>
Evaluate and align third-party IT control frameworks as inputs to audit scope.</p></li></ul></div><div><ul><li><p>
Identify risks and control gaps, across MACU IT processes and systems.</p></li></ul></div><div><ul><li><p>
Contribute to IT audit entity risk assessments and development of the IT audit plan.</p></li></ul></div><div><ul><li><p>
Conduct and lead interviews with key MACU IT personnel to gather required understanding of process and risks for advisory engagements</p></li></ul></div><div><ul><li><p>
Provide insights into IT and cyber risk exposures, control design, and governance effectiveness.</p></li></ul></div><div><ul><li><p>
Recommend practical, risk-based solutions to improve IT controls, processes, and compliance posture.</p></li></ul></div><div><ul><li><p>
Prepare clear, concise audit documentation including work papers, findings, and audit reports.</p></li></ul></div><div><ul><li><p>
Prepare and communicate audit engagement status and observations to management and stakeholders.</p></li></ul></div><div><ul><li><p>
Track and validate remediation efforts to ensure timely resolution of audit findings.</p></li></ul></div><div><ul><li><p>
Contribute to continuous improvement of audit methodologies, tools, and data analytics capabilities.</p></li></ul></div><div><ul><li><p>
Stay current with emerging technologies, cybersecurity risks, and regulatory expectations.</p></li></ul></div><div><ul><li><p>
Support adoption of audit automation and GRC tools (e.g., Archer or similar platforms, if applicable in your environment).</p></li></ul></div><div><ul><li><p>
Partner with business, IT, Risk Management, and Compliance teams to enhance alignment across the Three Lines model.</p></li></ul></div></div><div><div><ul><li><p>
Serve as a trusted advisor while maintaining auditor independence and objectivity.</p></li></ul></div><div><ul><li><p>
Provide guidance and mentorship to Staff Auditors and interns.</p></li></ul></div><div><ul><li><p>
Review audit workpapers and ensure quality and adherence to standards.</p></li></ul></div><div><ul><li><p>
Assist managers in audit planning and stakeholder engagement.</p></li></ul></div><div><ul><li><p>
Maintain and develop competencies aligned with internal audit standards and professional development expectations.</p></li></ul></div><div><ul><li><p>
Uphold independence, objectivity, and ethical standards in all audit activities.</p></li></ul></div><p></p><div><p><b><br>
Minimum</b><b> </b><b>Qualifications</b></p></div><div><p><b>
Education</b></p></div><div><ul><li><p>
Bachelor&rsquo;s degree in information systems, Computer Science, Accounting, Cybersecurity, Data Analytics or a related field.</p></li></ul></div><p></p><div><p><b>
Experience</b></p></div><div><ul><li><p>
Three years performing end-to-end IT and/or cybersecurity audits</p></li></ul></div><div><ul><li><p>
One or more years of experience leading IT and cybersecurity end-to-end process and control walkthroughs.</p></li></ul></div><p></p><div><p><b>
Certification</b></p></div><div><ul><li><p>
Passed at least one of the following CISA, CPA or CIA exams.</p></li></ul></div><p></p><div><p><b><br>
Preferred Qualifications</b></p></div><p></p><div><p><b>
Education</b></p></div><div><ul><li><p>
Master&rsquo;s degree in information systems, Computer Science, Accounting, Cybersecurity, Data Analytics or a related field.</p></li></ul><p></p><div><p><b>
Experience</b></p></div><div><ul><li><p>
Demonstrated understanding of how to apply IT control frameworks (e.g., NIST, COBIT, ISO 27001) in auditing.</p></li></ul></div><div><ul><li><p>
Demonstrated ability to assess risks, analyze complex systems, and identify control weaknesses.</p></li></ul></div><div><ul><li><p>
Strong written and verbal communication skills, with the ability to present to management with confidence.</p></li></ul></div><div><ul><li><p>
Demonstrated application of analytical thinking and synthesis of disparate information.</p></li></ul></div><div><ul><li><p>
Demonstrated ability to work autonomously and execute more than one audit engagement simultaneously.</p></li></ul><p></p><div><p><b>
Certification</b></p></div><div><p>
Achieved at least one of the following CISA, CPA or CIA certifications.</p></div></div></div></div><p></p><p><b><br>
Managerial Responsibility</b></p><p>
None</p><p></p><p><b>
Computer/Office Equipment Skills
</b></p><ul><li>Advanced level skill for Microsoft Office (Outlook, Word, PowerPoint, Excel), especially Excel.</li><li>
Knowledge of computer assisted audit techniques preferred.</li><li>
Experience with data analysis software, such as ACL, IDEA, and/or Picalo, preferred.</li></ul><p></p><p><b>
Language Skills
</b></p><ul><li>Demonstrated ability to clearly communicate verbally and in writing.</li><li>
Demonstrated ability to read and follow instructions.</li></ul><p></p><p><b>
Other Skills and Abilities
</b></p><ul><li>Ability to perform ad hoc data analysis in conjunction with audits, as necessary.</li><li>
Understanding of financial institution operations and transactions.
</li><li>Ability to communicate effectively and courteously.</li><li>
Ability to understand regulations.</li><li>
 Understanding of the credit union data system and ability to use a computer, and software applications.</li><li>
Ability to recognize and analyze problems, improprieties, and opportunities for improvement.</li></ul><p></p><p><b>
PHYSICAL ABILITIES / WORKING CONDITIONS
</b></p><p></p><p><b>Physical Demands</b></p><p>
Ability to sit, talk and hear consistently</p><p>
Ability to stand, walk, and use hands to handle or reach occasionally</p><p></p><p><b>
Vision Requirements</b></p><p>
Close vision (clear vision at 20 inches or less)</p><p>
Distance vision (clear vision at 20 feet or more)</p><p></p><p><b>
Weight Lifted or Force Exerted</b></p><p>
Ability to lift up to 25 pounds occasionally may need to lift up to 50 pounds.</p><p></p><p><b>
Environmental</b></p><p>
There are no unusual environmental factors (such as a typical office)</p><p></p><p><b>
Noise Environment</b></p><p>
Moderate noise (business office with computers and printers, light traffic)</p><p><i>
***This Job is not eligible to be performed in Colorado or Connecticut, either remotely or in-person.***</i></p><p>
Mountain America Credit Union is an EEO/AA/ADA/Veterans employer.</p></div>

Senior Auditor

Digital Egypt For Investment Co.

<div>
 <strong>
  Overview
  <br/>
  <br/>
 </strong>
 We are seeking a highly skilled and experienced
 <strong>
  Information Security Auditor
 </strong>
 to join our dynamic team. The ideal candidate will be responsible for executing comprehensive information security audits to assess the effectiveness of our organizations&rsquo; security controls and processes. The Senior Information Security Auditor will play a crucial role in identifying vulnerabilities, recommending improvements, and ensuring compliance with industry standards and regulations.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <strong>
  Audit Planning and Execution:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Support the planning, execution, and management of information security audits, including risk assessments and scoping.
  </li>
  <li>
   Conduct thorough reviews of security policies, procedures, and technical controls.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Risk Assessment
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Identify and evaluate potential security risks and vulnerabilities, and provide recommendations for risk mitigation.
  </li>
  <li>
   Collaborate with cross-functional teams to assess the impact of identified risks on business operations.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Compliance And Standards
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Ensure compliance with relevant laws, regulations, and industry standards.
  </li>
  <li>
   Keep abreast of changes in the regulatory environment and recommend adjustments to audit processes accordingly.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Report Generation
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Prepare clear and concise audit reports outlining findings, recommendations, and remediation plans.
  </li>
  <li>
   Communicate audit results to senior management and provide guidance on security best practices.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Collaboration
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Collaborate with internal teams to promote a culture of security awareness and compliance.
  </li>
  <li>
   Support communication with other cross-functional departments to address security concerns and implement solutions.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Continuous Improvement
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Support continuous improvement initiatives related to information security processes and controls.
  </li>
  <li>
   Stay current with emerging security threats and technologies to enhance audit methodologies.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree in Information Security, Computer Science, or a related field.
  </li>
  <li>
   Certified Information Systems Auditor (CISA) or equivalent certifications.
  </li>
  <li>
   Proven experience in information security auditing, risk management, and compliance.
  </li>
  <li>
   Strong understanding of industry standards such as ISO 27001, NIST, and GDPR.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Proficient in using industry-standard audit tools and methodologies.
  </li>
  <li>
   Strong technical background in information security and familiarity with networking, operating systems, and security technologies.
  </li>
  <li>
   Ability to analyze complex systems and processes to identify vulnerabilities and risks.
  </li>
  <li>
   Excellent verbal and written communication skills for preparing reports and interacting with stakeholders.
  </li>
  <li>
   Effective project management skills for planning and executing audits within established timelines.
  </li>
  <li>
   In-depth knowledge of regulatory requirements and industry standards related to information security.
  </li>
  <li>
   Commitment to staying current with evolving security threats and technologies.
  </li>
 </ul>
</div>


Information Security Auditor

Stellar Hunters

<div><h4 class="jobSectionHeader"><b>Job Summary</b></h4>
<p>
We are seeking a seasoned <b>Senior Internal IT Auditor</b> to join the Internal Audit team and provide independent, objective assurance over the company&rsquo;s IT controls, risk management, and governance processes. The successful candidate will plan and execute IT audit engagements across applications, infrastructure, cloud, identity and access management, change management, and third-party services. This role will collaborate with IT, Security, Risk, Compliance, and business stakeholders to identify control gaps, recommend practical remediation, and drive improvements that support business objectives and regulatory requirements.</p>
<h4 class="jobSectionHeader"><b>Key Responsibilities</b></h4>
<h5 class="jobSectionHeader"><b>Audit Planning &amp; Execution</b></h5>
<ul>
<li><p>Plan, scope, and execute IT audit engagements using a risk-based approach, including development of audit programs, testing plans, and workpapers.</p></li>
<li><p>Perform detailed testing of IT general controls and application controls across cloud and on-premise environments, including change management, configuration management, and backup/recovery.</p></li>
<li><p>Evaluate the design and operating effectiveness of controls related to identity and access management, privileged access, segregation of duties, and authentication mechanisms.</p></li>
</ul>
<h5 class="jobSectionHeader"><b>Risk Assessment &amp; Control Evaluation</b></h5>
<ul>
<li><p>Conduct IT risk assessments to identify and prioritize technology risks and control gaps that could impact confidentiality, integrity, and availability of systems and data.</p></li>
<li><p>Map IT risks and controls to relevant frameworks and standards (e.g., COBIT, NIST, ISO 27001, SOC 2) and provide pragmatic control recommendations.</p></li>
<li><p>Assess third-party and cloud provider controls, review vendor risk management artifacts, and perform outsourced service audits where applicable.</p></li>
</ul>
<h5 class="jobSectionHeader"><b>Reporting &amp; Remediation</b></h5>
<ul>
<li><p>Prepare clear, well-supported audit findings, risk ratings, and actionable remediation recommendations; draft audit reports and present results to management and audit committees.</p></li>
<li><p>Work with process and technology owners to develop remediation plans, track remediation progress, and validate corrective actions.</p></li>
<li><p>Coordinate with external auditors and regulators as needed to support audits and attestations.</p></li>
</ul>
<h5 class="jobSectionHeader"><b>Continuous Improvement &amp; Advisory</b></h5>
<ul>
<li><p>Provide advisory support on IT control design and implementation to enable operational improvements while maintaining auditor independence.</p></li>
<li><p>Identify opportunities to enhance audit methodologies, testing tools, and automation to increase audit efficiency and coverage.</p></li>
<li><p>Mentor junior audit staff, review their workpapers and findings, and contribute to team knowledge-sharing and training.</p></li>
</ul>
<h4 class="jobSectionHeader"><b>Required Qualifications - Skills &amp; Experience</b></h4>
<ul>
<li><p>Bachelor&rsquo;s degree in Information Technology, Computer Science, Accounting, Cybersecurity, or a related field, or equivalent practical experience.</p></li>
<li><p>5+ years of experience performing IT audits, IT risk assessments, or IT control testing in an internal audit, external audit, or IT risk role.</p></li>
<li><p>Strong technical understanding of systems, networks, cloud platforms (e.g., AWS, Azure, GCP), databases, and common enterprise applications.</p></li>
<li><p>Experience auditing identity and access management, change management, system development lifecycle, vulnerability management, and patching processes.</p></li>
<li><p>Familiarity with audit methodologies, sampling techniques, and documentation standards; ability to produce clear, concise audit workpapers and reports.</p></li>
<li><p>Excellent written and verbal communication skills with the ability to engage technical and non-technical stakeholders and influence remediation efforts.</p></li>
<li><p>Demonstrated analytical mindset with experience in risk assessment, control evaluation, and executive-level reporting.</p></li>
<li><p>Proficiency with audit and productivity tools (e.g., GRC platforms, data analytics tools, Office suite).</p></li>
</ul>
<h4 class="jobSectionHeader"><b>Preferred Qualifications</b></h4>
<ul>
<li><p>Relevant certifications such as CISA, CISSP, CRISC, CISM, or Certified Internal Auditor (CIA) preferred.</p></li>
<li><p>Experience supporting Sarbanes-Oxley (SOX) IT testing, SOC 2 examinations, or other regulatory audits.</p></li>
<li><p>Background in cloud security, DevOps/SecOps practices, or secure software development lifecycle is a plus.</p></li>
<li><p>Experience with audit automation, data analytics (ACL, IDEA, Python, SQL), or continuous auditing tools.</p></li>
</ul>
<h4 class="jobSectionHeader"><b>Work Environment &amp; Compensation</b></h4>
<ul>
<li><p>Full-time position with a hybrid onsite/remote model; occasional travel may be required for fieldwork, audits, or meetings with third parties.</p></li>
<li><p>Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</p></li>
<li><p>Opportunities for professional development, certification support, and career progression within Internal Audit, Risk, and Security functions.</p></li>
<li><p>Inclusive, respectful work culture that values diversity, equity, and a healthy work-life balance.</p></li></ul></div>

Senior Internal IT Auditor

Yousuf Adil (Chartered Accountants)

<p><b>Job Summary</b></p><p>Yousuf Adil Chartered Accountants is looking for the position of &ldquo;Manager - Technology &amp; Cyber Risk Advisory&rdquo; within Technology and Cyber Risk Advisory department for its</p><p>Karachi office. The incumbent will be responsible for:</p><p><b>Job Description</b></p><ul><li>Lead end-to-end IT audit and advisory engagements, including planning, execution, reporting, and client communication.</li><li>Assess IT general controls (ITGC), application controls, cybersecurity, cloud environments, and emerging technologies.</li><li>Deliver insights and recommendations to strengthen client risk management and internal controls.</li><li>Support regulatory and compliance projects (e.g., ISO 27001, SOC 1/2, NIST, COBIT, etc.).</li><li>Develop and maintain strong client relationships and contribute to business development.</li><li>Manage and coach junior team members, promoting a culture of excellence and collaboration.</li><li>Relevant certifications such as CISA, CISM, CRISC, or ISO 27001 Lead Auditor are highly preferred.</li><li>Assist in preparing technical proposals for new venture or collaborations .</li></ul><p><b>Qualification</b></p><ul><li>BS - Computer Science /Information Systems / Cyber Security or related fields.</li></ul><p><b>Experience</b></p><ul><li>6+ years of experience in IT audit, advisory, cyber security or related fields (preferably in Big 4 firms or any similar sector/consulting services).</li></ul><p>Job Type: Full-time</p><p>Pay: From Rs200,000.00 per month</p><p>Application Question(s):</p><ul><li>Do you have experience in IT audit, advisory, cyber security or related fields ?</li><li>Have you completed Bachelors in Computer Science /Information Systems / Cyber Security or related fields.?</li></ul><ul><li>Do you have experience working in any Big four Firms?</li></ul><ul><li>What is your current salary?</li></ul><ul><li>What is your expected salary?</li></ul><ul><li>What will be your notice period?</li></ul><p>Location:</p><ul><li>Karachi (Required)</li></ul><p>Work Location: In person</p>

Manager - Technology and Cyber Risk Advisory

Arrow Components

<div>
 <strong>
  Position
  <br/>
  <br/>
 </strong>
 Senior IT Security Compliance Engineer
 <br/>
 <br/>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 The Senior IT Security Compliance Engineer is responsible for developing, maintaining, and advancing the organization&rsquo;s security compliance posture. This role leads security audits, manages compliance frameworks, and ensures the effectiveness of security controls across the organization. The position works closely with cross‑functional stakeholders to support regulatory requirements, customer security inquiries, and continuous security improvements in a SaaS/cloud-based environment.
 <br/>
 <br/>
 Key Responsibilities
 <br/>
 <br/>
 <ul>
  <li>
   Develop, review, and maintain IT security policies, standards, procedures, and guidelines in alignment with industry best practices and regulatory requirements.
  </li>
  <li>
   Lead and coordinate compliance initiatives for security frameworks and standards, including but not limited to ISO 27001, SOC 2, CMMC, NIST, and internal security assessments.
  </li>
  <li>
   Manage audit readiness activities, including documentation preparation, evidence collection, stakeholder coordination, and remediation tracking for internal and external audits.
  </li>
  <li>
   Respond to customer and partner security questionnaires, ensuring accurate, consistent, and timely responses.
  </li>
  <li>
   Conduct periodic security and risk assessments to evaluate the effectiveness of security controls and identify improvement opportunities.
  </li>
  <li>
   Track, manage, and follow up on vulnerability remediation efforts in collaboration with IT, engineering, and operations teams.
  </li>
  <li>
   Prepare and deliver security metrics, compliance reports, and executive-level summaries.
  </li>
  <li>
   Provide security awareness, training, and education to employees to promote a strong security culture across the organization.
  </li>
  <li>
   Support continuous improvement of governance, risk, and compliance (GRC) processes and tooling.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements And Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong knowledge of information security principles, risk management, and compliance frameworks, with a solid understanding of ISO 27001 requirements and controls.
  </li>
  <li>
   Hands-on experience supporting audits and compliance programs for frameworks such as ISO 27001, SOC 2, CMMC, NIST, or similar.
  </li>
  <li>
   GRC-related certification (e.g., CISSP, CISA, CRISC, ISO 27001 Lead Implementer/Lead Auditor) is preferred.
  </li>
  <li>
   Experience working in SaaS or technology-driven environments is highly desirable.
  </li>
  <li>
   Familiarity with cloud computing platforms and cloud security principles.
  </li>
  <li>
   Excellent written and verbal communication skills, with proven ability to produce clear, high-quality security documentation and reports.
  </li>
  <li>
   Minimum of 5 years of professional experience in cybersecurity, information security, or compliance-related roles.
  </li>
  <li>
   Bachelor&rsquo;s degree in Computer Engineering, Computer Science, Information Security, or a related field.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Location:
  <br/>
  <br/>
 </strong>
 EG-Cairo, Egypt (Al Emdad &amp; Al Tamween)
 <br/>
 <br/>
 <strong>
  Time Type
  <br/>
  <br/>
 </strong>
 Full time
 <br/>
 <br/>
 <strong>
  Job Category
  <br/>
  <br/>
 </strong>
 Information Technology
</div>


Senior IT Security Compliance Engineer

Zones

<div><p><b>Description</b><br>
</p><br>
<br>
<p>Company Overview:</p><p>
When it comes to IT solution providers, there are a lot of choices. But when it comes to providers with innovative and differentiating end-to-end service offerings, there&rsquo;s really only one: Zones &ndash; First Choice for IT.TM</p><p>
Zones is a Global Solution Provider of end-to-end IT solutions with an unmatched supply chain. Positioned to be the IT partner you need, Zones, a Minority Business Enterprise (MBE) in business for over 35 years, specializes in Digital Workplace, Cloud &amp; Data Center, Networking, Security, and Managed/Professional/Staffing services. Operating in more than 120 countries, leveraging a robust portfolio, and utilizing the highest certification levels from key partners, including Microsoft, Apple, Cisco, Lenovo, Adobe, and more, Zones has mastered the science of building digital infrastructures that change the way business does business ensuring whatever they need, they can Consider IT Done. Follow Zones, LLC on Twitter @Zones, and LinkedIn and Facebook.</p><p>
Position Overview:</p><p>
The Information Security Auditor will be responsible for independent planning, executing, and reporting on audits of Zones&rsquo; information security management system (ISMS), privacy information management system (PIMS), and related compliance frameworks (ISO 27001, ISO 27701, SOC 2, etc.). This role ensures continuous improvement of Zones&rsquo; security posture, identifies risks and non-conformities, and provides actionable recommendations to the CISO and senior management.</p><p>
Key Responsibilities:</p><ul><li>
Develop, maintain, and execute the internal IS audit plan under the direction of the CISO.</li><li>
Conduct process, technical, and compliance audits in line with ISO 27001/27701 standards.</li><li>
Validate the effectiveness of security controls across infrastructure, applications, and processes.</li><li>
Assess compliance with regulatory, contractual, and corporate requirements.</li><li>
Identify gaps and risks; recommend corrective and preventive actions.</li><li>
Provide input to the CISO for risk prioritization and security strategy.</li><li>
Prepare concise audit reports with clear findings, root causes, and recommendations.</li><li>
Present audit results to the CISO and Information Security Steering Committee (ISSC).</li><li>
Track remediation progress and report status updates to leadership.</li><li>
Engage with IT, Network, Data Center, and Business teams to review evidence and remediation.</li><li>
Support the CISO in preparing for external audits (ISO, SOC 2, client/vendor assessments).</li><li>
Advise on best practices and continuous improvement of ISMS/PIMS.</li></ul><p>
Required Skills &amp; Competencies:</p><ul><li>
Deep knowledge of ISO 27001:2022 and ISO 27701 standards.</li><li>
Familiarity with other frameworks: NIST CSF, SOC 2, PCI DSS, CIS Controls.</li><li>
Understanding of cloud (Azure, O365), IT infrastructure, and cybersecurity controls.</li><li>
Strong audit methodology, documentation, and reporting skills.</li><li>
Excellent communication and ability to influence cross-functional teams.</li><li>
High integrity, independence, and objectivity.</li></ul><p>
Qualifications &amp; Experience:</p><ul><li>
Bachelor&rsquo;s degree in Information Security, Computer Science, or related field.</li><li>
Preferred certifications or Trainings: ISO 27001 Lead Auditor, ISO 27701 Lead Implementer, CISA, CISSP, CISM.</li><li>
At least 2-3 years&rsquo; experience in internal audits, compliance, or security governance.</li><li>
Experience in IT services or reseller industry is an advantage.</li><li>
Key Performance Indicators (KPIs):</li><li>
Timely delivery of internal IS audit plan.</li><li>
Rate of closure for non-conformities/findings.</li><li>
Effectiveness of recommendations (as measured by improved audit scores or reduced incidents).</li><li>
Contribution to successful external audits and certifications.</li></ul><p>
Zones offers a comprehensive Benefits package</p><p>
At Zones, we are committed to fostering an inclusive and diverse workplace where every team member is valued and supported. We offer life insurance, optional health insurance, EOBI, and a voluntary pension scheme in line with Company policy. Employees also enjoy additional perks such as Complimentary meals, and access to our in-house gym.</p><p>
We take pride in being an equal opportunity employer and remain dedicated to maintaining a workplace free from discrimination of any kind. If you are passionate about driving innovation in IT, sales, engineering, or operations, Zones provides a dynamic and collaborative environment to help you grow your career.</p><p>
All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, age, genetic information, or pregnancy.</p><p>
Job timings: 8:00PM &ndash; 5:00AM (Pk time)</p><p></p><p><br>
#LI-MA1</p></div><p></p>

Texas Comptroller of Public Accounts

<div><div><b>OAG - Enterprise Information Security | Chief Information Security Officer | 26-0234</b> <b>(</b><b>00056888</b><b>)</b><div>
</div><b>
Organization</b><b>:</b> OFFICE OF THE ATTORNEY GENERAL<div>
</div></div><div><b>
Primary Location</b><b>:</b> Texas-Austin<div>
</div><b>
Work Locations</b><b>:</b> ITS - Admin 300 W. 15th St Austin 78701<div></div><div><br>
</div></div><div><b>
Job</b><b>:</b> Computer and Mathematical<div>
</div></div><div><b>
Employee Status</b><b>:</b> Regular<div>
</div></div><div><b>
Schedule</b><b>:</b> Full-time<div>
</div><b>
Standard Hours Per Week</b><b>:</b> 40.00<div>
</div></div><div><b>
State Job Code</b><b>:</b> 0239<div>
</div></div><div><b>
Salary Admin Plan</b><b>:</b> B<div>
</div></div><div><b>
Grade</b><b>:</b> 32<div>
</div></div><div><b>
Salary (Pay Basis)</b><b>:</b> 14,583.33 - 17,083.34 (Monthly)<div>
</div></div><div><b>
Number of Openings</b><b>:</b> 1<div>
</div></div><div><b>
Overtime Status</b><b>:</b> Exempt<div>
</div></div><div><b>
Job Posting</b><b>:</b> Mar 12, 2026, 3:24:05 PM<div>
</div></div><div><b>
Closing Date</b>: Ongoing<div>
</div></div><div><b>
Description</b><div></div><p><b><br>
GENERAL DESCRIPTION</b><br>
The CISO leads the Office of the Attorney General&rsquo;s (OAG) information security program, setting vision and strategy to protect information assets, systems, and infrastructure. This role partners with internal divisions, state and federal agencies, and vendors to implement best-in-class security practices aligned with policies and standards.</p><div>
Key responsibilities include:<br>
<ul><li>Developing, maturing, and executing OAG&rsquo;s cybersecurity strategy and program.</li><li>Advising the Office of the CIO on security risks and acceptable risk levels.</li><li>Overseeing cybersecurity operations, risk management, and incident response.</li><li>Embedding security into digital transformation initiatives, including cloud expansion and modernization.</li><li>Driving adoption and enforcement of security policies and procedures.</li><li>Leading a high-performing team of security professionals.</li></ul></div><p>
The ideal candidate demonstrates servant leadership, fosters collaboration, and proactively addresses emerging threats. This position reports to the CIO and supports OAG&rsquo;s mission to deliver secure, high-quality technology services for Texans.</p><p>
The OAG is a dynamic state agency with over 4,000 employees throughout the State of Texas, and is committed to providing innovative, modern, and value-driven IT services to the agency. We believe that having talented people in the right place while effectively utilizing new tools and technologies enables us to empower the agency to best serve the people of Texas. OAG employees enjoy excellent benefits (https://ers.texas.gov/Benefits-at-a-Glance) along with tremendous opportunities to do important work at a large, dynamic state agency making a positive difference in the lives of Texans.</p><p><b><br>
ESSENTIAL POSITION FUNCTIONS</b></p><ul><li>
Leads the agency&rsquo;s information security function to ensure consistent, high-quality security management aligned with agency goals and the protection of information assets, technologies, applications, systems, infrastructure, and processes.</li><li>
Establishes and enforces cybersecurity standards, policies, and procedures to maintain service continuity during changes, security incidents, or disaster recovery events.</li><li>
Develops and oversees a strategic, comprehensive information security program ensuring confidentiality, integrity, availability, privacy and recovery of organizational information assets.</li><li>
Operates and manages the Security Operations Center (SOC) to monitor infrastructure for cyber threats, including external attacks and insider risks.</li><li>
Builds and leads a skilled team of security professionals responsible for risk reduction, incident response, and collaboration with business and technical stakeholders during cyber events.</li><li>
Directs threat intelligence collection, analysis, and dissemination to internal teams and partner organizations to strengthen cybersecurity posture.</li><li>
Conducts security assessments, risk analyses, and audits; defines and maintains security standards and compliance requirements.</li><li>
Represents the agency in internal and external forums on information security strategy and represents information security in IT and executive governance committee.</li><li>
Oversees security awareness, communication, and training programs to promote a strong security culture across the organization.</li><li>
Performs related work as assigned</li><li>
Maintains relevant knowledge necessary to perform essential job functions</li><li>
Attends work regularly in compliance with agreed-upon work schedule. Telework schedules are permitted for employees based on the agency&rsquo;s approved Telework Plan (if schedule does not adversely affect operations and service levels, and standard hours of operation are maintained). Telework schedules are set by the Departments based on business needs.</li><li>
Ensures security and confidentiality of sensitive and/or protected information</li><li>
Complies with all agency policies and procedures, including those pertaining to ethics and integrity</li></ul><div>
</div></div><div><b>
Qualifications</b><div></div><p><b><br>
MINIMUM QUALIFICATIONS</b></p><ul><li>
Education: Graduation from high school or equivalent</li><li>
Education: Graduation from an accredited four-year college or university with major coursework in cybersecurity, information technology, computer engineering, computer information systems, computer science, management information systems, or a related field is generally preferred; experience in the following (or closely related) fields may be substituted for the required education on a year-for-year basis: information security, information technology, or risk management</li><li>
Experience: 10 years of full-time experience working in the following (or closely related) fields: information security, information technology, or risk management</li><li>
Experience and technical mastery in cybersecurity analysis work, with emphasis on security operations, incident management, intrusion detection, information protection, security systems deployment, and security event analysis</li><li>
Experience in building and/or maturing a Security Operations Center, including the integration of monitoring, threat intelligence, forensic analysis, and incident response</li><li>
Knowledge of local, state, and federal laws and regulations relevant to information security, privacy, and computer crime; of the principles and practices of public administration and management; of the limitations and capabilities of computer systems; of technology across all network layers and computer platforms; of operational support of networks, operating systems, Internet technologies, databases, and security applications; of cybersecurity controls, procedures, and regulations; and of incident response program practices and procedures</li><li>
Skill in the use of a computer and applicable software; and in configuring, deploying, and monitoring security infrastructure</li><li>
Ability to manage and oversee the development, monitoring, and maintenance of security processes and controls; to identify problems, evaluate alternatives, and implement effective solutions; to develop and evaluate policies and procedures; to prepare reports; to implement security best practices and awareness; to communicate effectively; and to supervise the work of others</li><li>
Ability to provide excellent customer service</li><li>
Ability to arrange for personal transportation for business-related travel</li><li>
Ability to work more than 40 hours as needed and in compliance with the FLSA</li><li>
Ability to lift and relocate 10 lbs.</li><li>
Ability to travel (including overnight travel) up to 10%</li></ul><p><b><br>
PREFERRED QUALIFICATIONS</b></p><ul><li>
Certifications: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC)</li></ul><p><b>
TO APPLY</b></p><p>
To apply for a job with the OAG, electronic applications can be submitted through CAPPS Recruit. A State of Texas application must be completed to be considered, and paper applications are not accepted. Your application for this position may subject you to a criminal background check pursuant to the Texas Government Code. Military Crosswalk information can be accessed at https://hr.sao.texas.gov/Compensation/MilitaryCrosswalk/MOSC_InformationTechnology.pdf</p><p><b>
THE OAG IS AN EQUAL OPPORTUNITY EMPLOYER</b></p></div></div>

OAG - Enterprise Information Security | Chief Information Security Officer | 26-0234

Search 977+ Cybersecurity auditor jobs near you this May. New roles added regularly across leading industries. Apply today.

977 cybersecurity auditor jobs Near Me

Senior Auditor

Information Security Auditor

Senior Internal IT Auditor

Manager - Technology and Cyber Risk Advisory

Senior IT Security Compliance Engineer

Information Security Auditor

OAG - Enterprise Information Security | Chief Information Security Officer | 26-0234