cybersecurity auditor

Duncan & Ross Consulting

<div>
 <p>
  <strong>
   ROLE OVERVIEW
  </strong>
 </p>
 <p>
  We are seeking a skilled IT Audit professional (Assistant Manager / Senior Consultant level) to lead and deliver technology and cybersecurity audit engagements. The role involves assessing IT controls, security frameworks, and governance practices across a range of environments, ensuring alignment with regulatory requirements and industry standards.
 </p>
 <p>
  <strong>
   KEY RESPONSIBILITIES
  </strong>
 </p>
 <p>
  <strong>
   Technology Audits
  </strong>
 </p>
 <ul>
  <li>
   Perform audits covering cloud environments, including security, governance, and deployment architecture
  </li>
  <li>
   Review system configurations, hardening practices, and infrastructure security across platforms
  </li>
  <li>
   Assess risks related to emerging technologies and recommend mitigation strategies
  </li>
 </ul>
 <p>
  <strong>
   Cybersecurity Audits
  </strong>
 </p>
 <ul>
  <li>
   Evaluate cybersecurity governance frameworks and organizational security posture
  </li>
  <li>
   Review identity and access management controls (IAM)
  </li>
  <li>
   Assess network security components including firewalls, IDS/IPS, and web application firewalls (WAF)
  </li>
  <li>
   Conduct or review Vulnerability Assessments and Penetration Testing (VAPT)
  </li>
  <li>
   Assess data protection measures, incident response processes, and security operations
  </li>
 </ul>
 <p>
  <strong>
   IT Controls Assessment
  </strong>
 </p>
 <ul>
  <li>
   Perform reviews of IT General Controls (ITGC) including access management, change management, and IT operations
  </li>
  <li>
   Evaluate application controls to ensure data integrity, accuracy, and reliability
  </li>
  <li>
   IT Service Management (ITSM) Audits
  </li>
  <li>
   Assess IT service management processes aligned with frameworks such as ITIL
  </li>
  <li>
   Review incident, problem, change, and service request management processes
  </li>
 </ul>
 <p>
  <strong>
   Compliance &amp; Regulatory Audits
  </strong>
 </p>
 <ul>
  <li>
   Conduct compliance assessments against relevant standards and regulations such as:
  </li>
  <li>
   UAE Information Assurance (UAE IA)
  </li>
  <li>
   ISO 27001
  </li>
  <li>
   NIST
  </li>
  <li>
   CIS Controls
  </li>
  <li>
   Identify gaps and provide actionable recommendations for compliance improvement
  </li>
 </ul>
 <p>
  <strong>
   QUALIFICATIONS &amp; EXPERIENCE
  </strong>
 </p>
 <ul>
  <li>
   Bachelor's degree in Information Technology, Computer Science, or related field
  </li>
  <li>
   6&ndash;8 years of experience in IT Audit, Technology Risk, or Cybersecurity
  </li>
  <li>
   Experience working in consulting firms or large enterprises is preferred
  </li>
  <li>
   Strong understanding of cloud platforms (AWS, Azure, GCP) and security best practices
  </li>
  <li>
   Hands-on experience in ITGC, ITAC, and cybersecurity audits
  </li>
 </ul>
 <p>
  <strong>
   Preferred Certifications
  </strong>
 </p>
 <ul>
  <li>
   CISA (Certified Information Systems Auditor)
  </li>
  <li>
   CISSP (Certified Information Systems Security Professional)
  </li>
  <li>
   ISO 27001 Lead Auditor / Implementer
  </li>
  <li>
   ITIL Certification
  </li>
 </ul>
 <p>
  <strong>
   Key Skills
  </strong>
 </p>
 <ul>
  <li>
   Strong knowledge of IT audit methodologies and risk assessment techniques
  </li>
  <li>
   Familiarity with cybersecurity tools and technologies
  </li>
  <li>
   Analytical thinking with strong attention to detail
  </li>
  <li>
   Excellent communication and stakeholder management skills
  </li>
  <li>
   Ability to manage multiple engagements and deliver within timelines
  </li>
 </ul>
 <p>
  <strong>
   Key Deliverables
  </strong>
 </p>
 <ul>
  <li>
   Audit reports highlighting risks, gaps, and control weaknesses
  </li>
  <li>
   Practical and actionable remediation recommendations
  </li>
  <li>
   Compliance assessment reports aligned with industry standards
  </li>
  <li>
   Stakeholder presentations and audit documentation
  </li>
 </ul>
 <p>
  Vertical
 </p>
 <p>
  Technology
 </p>
</div>


Information Technology Audit Consultant

Riyad Bank

<div>
 <p>
  <strong>
   Job Brief:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  We are seeking an experienced IT Audit / Cybersecurity professional to join our Information Technology Audit Unit. The role involves leading IT internal and external audits, assessing technology and cybersecurity controls, evaluating risk management practices, and ensuring compliance with regulatory and industry standards. The auditor will also conduct application and infrastructure reviews, oversee data privacy compliance (PDPL / GDPR), and support business continuity and disaster recovery initiatives.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Requirements:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in IT, Cybersecurity, Computer Science, Finance, or related field.
  </li>
  <li>
   Mandatory: Proven experience in the financial industry or top-tier consulting firms.
  </li>
  <li>
   Strong knowledge of SAMA regulations and frameworks.
  </li>
  <li>
   8&ndash;12+ years of total experience, including at least 5+years in IT Audit.
  </li>
  <li>
   Hands-on experience in IT general controls (ITGC), application controls, and infrastructure reviews.
  </li>
  <li>
   Relevant certifications such as CISA, CISSP, CISM, CRISC, CIA, or equivalent are required.
  </li>
 </ul>
 <p>
 </p>
</div>


Internal Audit Manager- IT& Cybersecurity

<div><p>Vice President, Technology Auditor, Cybersecurity</p>
<p>
At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.</p>
<p>
Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.</p>
<p>
We&rsquo;re seeking a future team member for the role of Vice President, Auditor to join Cybersecurity team on our Technology team within Internal Audit. This role is located in New York, New York or Pittsburgh, PA.</p>
<p>
In this role, you&rsquo;ll make an impact in the following ways:</p>
<ul>
<li>Support the auditing of technical policies and procedures which safeguard infrastructure, systems, files and data.</li>
<li>Understanding of Network Penetration testing.</li>
<li>Conduct application, network, and operating system security assessments</li>
<li>Understanding of alerting and monitoring of cyber tools that include but not limited to SPLUNK, CyberArk, Powerbroker, etc.</li>
<li>Support investigations and research for possible computer security related incidents.</li>
<li>Assess cloud computing and AI technologies.</li>
<li>Assess incident response team actions and procedures.</li>
<li>Assess Vulnerability Management programs</li>
<li>Assess security monitoring of clients, servers, applications, and network infrastructure activities.</li>
<li>Conduct log analysis to identify suspicious or malicious activity and anomalous behavior.</li>
<li>Represent cyber security on cross-functional IT project teams.</li>
<li>Support the analysis, design, functional review and interpretation of requirements of security related hardware and software.</li>
<li>Understand Data Protection risks and strategies</li>
<li>Apply knowledge of key regulations and industry standards such as ISO 27001&amp;2, NIST SP800-53, NIST Cybersecurity Framework, including the FFIEC Handbook.</li>
<li>Knowledge of scripting/coding such as Java, Go, C, C++, C#, Ruby, Perl, Python, PHP, HTML, Assembler languages</li>
<li>Strong communication skills (both written and verbal)</li>
</ul>
<p>To be successful in this role, we&rsquo;re seeking the following:</p>
<ul>
<li>Bachelor's degree or equivalent combination of education and work experience required.</li>
<li>Degree in Computer Science, Cyber Security, Accounting, or relevant critical thinking specialty such as MIS, DIS, Mathematics preferred.</li>
<li>CISA or CISSP or related certifications preferred.</li>
<li>5-10 years of total work experience preferred.</li>
<li>Prior experience in Audit or the relevant specialty area preferred.</li>
<li>Additional core skill requirements include understanding of the applied and interpretation of analytics results for Audit, critical thinking and problem solving.</li></ul><br>
<p><br>
At BNY, our culture speaks for itself, check out the latest BNY news at:</p>
<p>
BNY Newsroom</p>
<p>
BNY LinkedIn</p>
<p>
 Here&rsquo;s a few of our recent awards:</p>
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul><br>
<p><br>
Our Benefits and Rewards:</p>
<p>
BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.</p>
<p>
BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.</p><p><br>
<br>
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $68,000 and $160,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs.<br>
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</p></div>

Vice President, Technology Auditor, Cybersecurity

GE Vernova

<div><div><div>The Senior Auditor - Digital Technology &amp; Cybersecurity will play a significant role in transforming and elevating GE Vernova&rsquo;s internal audit capabilities. Reporting to the Senior Manager &ndash; Digital Technology &amp; Cybersecurity, this position offers a hybrid work schedule and an opportunity to influence the future of audit within a global organization.<br>
<br>
GE Vernova completed a significant transformation of its portfolio, leadership, operations, and culture in April 2024. A key priority in this transformation is the evolution of the Internal Audit function - shifting toward deep, data-driven, modern audit practices that serve as a strategic business partner to the Audit Committee and executive leadership, while continuing to foster talent development across the enterprise.<p></p><h1 class="jobSectionHeader"><b>
Job Description</b></h1><p><b>
Roles and Responsibilities</b></p><ul><li>
Execute a portfolio of Digital Technology &amp; Cybersecurity audits, ensuring timely delivery of the audit plan and providing management with prompt, actionable results.</li><li>
Scope and deliver risk‑based audits, reporting findings in clear, concise, and value‑added audit reports. Partner with management to develop remediation plans and track corrective actions to completion.</li><li>
Develop audit programs and testing procedures aligned to risks, processes, controls, and test objectives.</li><li>
Review process and control documentation to identify gaps, and perform detailed reviews of testing completed by other Internal Audit team members.</li><li>
Provide regular progress updates and escalations to the Internal Audit Manager to support informed decision‑making.</li><li>
Collaborate with digital technology, cybersecurity, compliance, and data analytics teams to deliver fully integrated audits and present a unified approach to stakeholders.</li><li>
Apply data analytics tools and techniques to enhance audit effectiveness and identify trends, anomalies, and risk areas.</li><li>
Build and maintain strong stakeholder relationships, staying informed on business initiatives, risk profiles, and impacts to the audit plan.</li><li>
Stay current on emerging regulations and trends, incorporating relevant changes into audit planning and execution.</li><li>
Promote continuous improvement by identifying and integrating best practices, modern tools, and technologies into audit processes.</li><li>
Contribute to an inclusive team environment where all members can bring their full selves to work and perform at their best.</li></ul><p></p><p><b>
Required Qualifications</b></p><ul><li>
Bachelor&rsquo;s degree in accounting, finance, business administration, information technology, cybersecurity, or a related field.</li><li>
3+ years of relevant internal audit or equivalent experience in industries such as manufacturing, medical devices, technology, consulting, or financial services&mdash;preferably with a Fortune 500 company or Big 4 firm&mdash;including at least 2 years in internal audit management.</li><li>
Familiarity with frameworks such as NIST 800‑53, NIST 800‑171, the NIST Privacy Framework, CSA CCM, ISO 27001, ITIL v3, COBIT, and FAIR.</li><li>
Ability to travel domestically and internationally approximately 15&ndash;20%.</li></ul><p></p><p><b>
Desired Qualifications</b></p><ul><li>
Demonstrated experience or exposure in audit and risk management.</li><li>
Proficient in leveraging AuditBoard and other auditing tools to drive efficiency.</li><li>
Solid understanding of legal, regulatory, and compliance requirements.</li><li>
Strong communication skills, including listening, writing, presenting, and influencing.</li><li>
Lean‑minded approach with a passion for continuous operational improvement.</li><li>
Experience with data analytics tools and techniques is a plus.</li><li>
Strong project management and organizational capabilities.</li><li>
Proven analytical and problem‑solving skills.</li><li>
Ability to coach, mentor, and develop team members.</li><li>
Professional certifications such as CISA, CISSP, or CISM are preferred.</li></ul><p></p><div><div><div><div><div><div><div><p>
GE Vernova offers a great work environment, professional development, challenging careers, and competitive compensation. GE Vernova is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.</p></div></div></div></div></div></div></div><p></p><div><div><div><div><div><div><div><p>
GE Vernova will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable).
</p></div></div></div></div></div></div></div><p></p><div><div><div><div><div><div><div><p><b>Relocation Assistance Provided: </b>Yes</p></div></div></div></div></div></div></div><br>
<p></p>
For candidates applying to a U.S. based position, the pay range for this position is between $119,100.00 and $198,500.00. The Company pays a geographic differential of 110%, 120% or 130% of salary in certain areas. The specific pay offered may be influenced by a variety of factors, including the candidate&rsquo;s experience, education, and skill set.<br>
<p></p>
Bonus eligibility: discretionary annual bonus.<br>
<p></p>
This posting is expected to remain open for at least seven days after it was posted on April 10, 2026.<br>
<p></p>
Available benefits include medical, dental, vision, and prescription drug coverage; access to Health Coach from GE Vernova, a 24/7 nurse-based resource; and access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling and referral services. Retirement benefits include the GE Vernova Retirement Savings Plan, a tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions, as well as access to Fidelity resources and financial planning consultants. Other benefits include tuition assistance, adoption assistance, paid parental leave, disability benefits, life insurance, 12 paid holidays, and permissive time off.<br>
<p></p>
GE Vernova Inc. or its affiliates (collectively or individually, &ldquo;GE Vernova&rdquo;) sponsor certain employee benefit plans or programs GE Vernova reserves the right to terminate, amend, suspend, replace, or modify its benefit plans and programs at any time and for any reason, in its sole discretion. No individual has a vested right to any benefit under a GE Vernova welfare benefit plan or program. This document does not create a contract of employment with any individual.</div></div></div><div></div>

Senior Auditor-2

General Dynamics Information Technology

<p></p><div><div><div><p>Your Impact</p><p>
Own your opportunity to work alongside federal civilian agencies. Make an impact by providing services that help the government ensure the well being and support of U.S. citizens.</p><p>
Job Description</p><div><p>
At GDIT, people are our differentiators. We are looking for someone with a cyber background who has audit experience. This role is to coordinate audits and remediation by facilitating meetings, managing requests, collecting artifacts, documenting notes/action items, and tracking corrective action plans and compliance status.</p><p>
HOW YOU WILL MAKE AN IMPACT</p><p></p><p>
Specific activities include:</p><ul><li><p>
Support auditor fieldwork and remediation activities by attending meetings, facilitating artifact collection and taking notes</p></li><li><p>
Collaborate with relevant Agency stakeholders to support the development of Corrective Action Plans and associated audit finding closure packages</p></li><li><p>
Produce draft report inputs and recurring analysis of audit status while and provide recommendations to drive process improvements</p></li><li><p>
Support the upkeep of accurate data in the agency&rsquo;s audit management tool (ServiceNow)</p></li><li><p>
Provide monthly (or as requested) reports on the status of open/ongoing/closed audits and associated findings to leadership</p></li><li><p>
Other duties as assigned</p></li></ul><p></p><p>
WHAT YOU&rsquo;LL NEED TO SUCCEED</p><p><br>
Education: Bachelor&rsquo;s Degree or equivalent experience</p><p></p><p>
Required Experience:</p><ul><li><p>
3+ years of relevant experience</p></li></ul><p></p><p>
Required Skills and Abilities:</p><ul><li><p>
Experienced in consulting and supporting executives and senior leadership.</p></li><li><p>
Familiarity with zero trust implementation and IT cybersecurity</p></li><li><p>
Create and update all relevant documentation as required</p></li><li><p>
Ability to effectively manage multiple competing priorities at any given time.</p></li><li><p>
Good team player, able to manage multiple assignments, and adapt to changing client needs.</p></li><li><p>
Outstanding communication skills with the ability to present to business leaders.</p></li><li><p>
Excellent communication and presentation skills with the ability to present complex data insights to both technical and non-technical audiences.</p></li><li><p>
Strong analytical skills with the ability to collect, organize, analyze, and disseminate insights with attention to detail and accuracy.</p></li><li><p>
Good team player, able to manage multiple assignments, and adapt to changing client needs.</p></li></ul>
</div></div><div><div><div><p>Work Requirements</p></div></div><div></div><div><div>
Years of Experience<div>
3 + years of related experience</div><ul><li>may vary based on technical training, certification(s), <i>or</i> degree</li></ul></div><div></div><div>
Certification</div><p></p><div>
Travel Required<div>
Less than 10%</div></div></div></div></div><div><p>
Salary and Benefit Information</p><div>
The likely salary range for this position is $76,500 - $103,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.<br>
View information about benefits and our total rewards program.</div><p>
About Our Work</p><div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div><i>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></div></div></div>

Cyber Audit and Compliance Specialist

Xcelerate Solutions

<div><p><b>Description</b><br>
</p><br>
<br>
<br>
As a Vision, Mission, and Driven company, VMD has been delivering information technology solutions to the Federal government in Agile Engineering, Cybersecurity, and Critical Infrastructure Protection since 2002. Our mission has now expanded, and we have merged with Xcelerate Solutions to revolutionize end-to-end enterprise security. Together we are committed to protecting our nation&rsquo;s citizens, critical infrastructure, and resources.<br>
<br>
<b>Why Join VMD Corp?</b><br>
At VMD, now a part of Xcelerate Solutions, you have the opportunity to thrive in your career and become a Game Changer. The quality and talent of our people is what drives our success. We embrace an employee-first culture and make it a priority to provide professional development opportunities that foster career growth.<br>
<br>
We help protect American Citizens and the nation&rsquo;s most critical infrastructure by working alongside our customers and delivering game changing solutions to strengthen their missions. We believe our passion and commitment to achieving our customers' goals and solve their most critical challenges defines who we are. We don&rsquo;t just dream big, we act on it &ndash; through teamwork, dedication, and resilience.<br>
<br>
<b>Your Impact to the Mission:</b><br>
As a Senior Cybersecurity and IT Assessor, you will support a government cybersecurity assessment and oversight program focused on strengthening enterprise security governance, operational resilience, and mission assurance. In this role, you will serve as an independent assessor responsible for evaluating the deployment, effectiveness, and operational maturity of cybersecurity implementations across government systems, enterprise platforms, cloud environments, and security programs, ensuring compliance with applicable federal requirements, mandates, and laws You will support the continued evolution of the assessment program through the development of maturity models, assessment methodologies, and process documentation, while collaborating with a team of assessors to foster a culture of knowledge sharing, continuous improvement, and technical excellence.<p></p><b><br>
Responsibilities:
</b><ul><li>Conduct in-depth technical, operational, and programmatic inspections, assessments, and audits of agency systems, applications, and enterprise services.</li><li>
Provide task leadership, work allocation, and mentorship to team members across assigned assessments; perform quality assurance reviews of deliverables; and ensure the timely, accurate completion of assessment activities and associated reporting milestones.</li><li>
Collect, analyze, and present accurate, risk-informed IT and cybersecurity technical and programmatic information.</li><li>
Support the maturation and continuous improvement of the cybersecurity assessment program, partnering closely with federal leadership and staff to strengthen methodologies, governance processes, reporting standards, and enterprise assessment capabilities.</li><li>
Develop, document, and maintain program processes, procedures, standards, and assessment methodologies</li><li>
Support enterprise strategic planning and program oversight initiatives, including cybersecurity capability roadmaps, governance enhancements, performance measures, and long-range modernization objective to strengthen cybersecurity posture, operational maturity, and implementation effectiveness.</li><li>
Provide executive-level input on program status, risk posture, performance metrics, and trend analysis, including the identification of recurring findings, systemic gaps, and strategic improvement opportunities.</li><li>
Obtain and maintain DOE Derivative Classifier certification(s) as required to support mission and program responsibilities.</li><li>
Maintain required professional certifications through continuous professional education (CPE) and ongoing professional development, while remaining current on emerging threats, evolving technologies, federal mandates, and cybersecurity best practices.</li></ul><br>
<br>
<b>Minimum Requirements:</b><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline, with 10+ years of relevant professional experience, including 8+ years of dedicated cybersecurity experience. Additional directly related experience may be substituted for the degree requirement.</li><li>
At least one DoD 8570 / 8140 compliant certification at the IAT Level III or IAM Level III level, such as CISSP, CISM, CASP+, CISA, GSLC, or GCIH.</li><li>
Demonstrated expert-level experience leading and conducting IT and cybersecurity inspections, independent assessments, compliance reviews, and audit activities.</li><li>
Deep working knowledge of federal cybersecurity requirements, mandates, and compliance frameworks, including FISMA, NIST SP 800-37, NIST SP 800-53, NIST SP 800-115, CNSSI 1253, and applicable OMB policies and memoranda.</li><li>
Exceptional verbal and written communication skills, with the ability to clearly and professionally engage with senior stakeholders, customers, technical teams, and executive leadership.</li><li>
Active or current DOE Q Clearance or Top Secret clearance with SCI eligibility, and the ability to successfully obtain and maintain a polygraph, as required.</li><li>
U.S. Citizenship required.</li></ul><br>
<b>
Desired Qualifications and Skills:</b><ul><li>
Demonstrated subject matter expertise in federal cybersecurity baseline requirements, with preferred experience supporting Department of Energy (DOE) environments, directives, and mission systems.</li><li>
Strong knowledge of organizational maturity assessment models, particularly those used to evaluate cybersecurity, information technology, and enterprise risk management capabilities.</li><li>
Exceptional written communication skills, including proven experience developing cybersecurity policies, standards, procedures, implementation guidance, and process documentation for technical and executive stakeholders.</li><li>
Hands-on experience in secure configuration management and system hardening, including application, validation, and tailoring of appropriate DISA STIGs, CIS benchmarks, and other secure baseline standards across enterprise environments.</li><li>
Demonstrated experience securing cloud environments, including implementation and assessment of secure configurations across AWS, Azure, or hybrid federal cloud platforms.</li><li>
Working knowledge of Zero Trust principles, architectures, and maturity frameworks, with experience evaluating or supporting implementation aligned to federal Zero Trust strategies.</li><li>
Experience supporting enterprise vulnerability management programs, including demonstrated proficiency with Tenable Security Center / Tenable.sc, vulnerability analysis, prioritization, and remediation validation workflows.</li><li>
Prior experience serving in an Information System Security Manager (ISSM) or equivalent cybersecurity leadership role, with responsibility for governance, risk oversight, and enterprise security program execution.</li></ul><br>
<br>
<b>The Ideal Candidate Will Excel By Demonstrating</b><ul><li>
A high level of initiative, professionalism, and self-motivation, with the ability to independently drive complex cybersecurity assessment activities to completion.</li><li>
Exceptional attention to detail.</li><li>
A commitment to continuous learning, with the ability to remain current on emerging cybersecurity technologies, threat trends, assessment methodologies, and federal security mandates.</li><li>
Strong written and verbal communication skills, including the ability to translate technical findings into clear, actionable guidance.</li><li>
Natural leadership and team influence, with the ability to lead assessment efforts and facilitate stakeholder engagement.</li></ul><br>
<br>
<b>Travel and Telecommuting:</b><ul><li>
Travel: Significant (between 25%-75%)</li><li>
Telecommute Options: Remote, with frequent travel. Work will be conducted at various sites across the continental US. Position will be remote when not traveling.</li></ul><br>
<br>
<i>Xcelerate Solutions and its subsidiaries are Equal Employment Opportunity/Affirmative Action Employers. We evaluate qualified applicants without regard to race, color, national origin, religion, age, equal pay, disability, veteran status, sex, sexual orientation, gender identity, genetic information, or expression of another protected characteristic. As part of this commitment to the full inclusion of all qualified individuals, Xcelerate provides reasonable accommodations if needed because of an applicant's or an employee's disability. Xcelerate Solutions maintains a drug-free workplace.</i></div>

Senior Cybersecurity and IT Assessor

Moore JFC Group

<p>We are seeking a detail-oriented and analytical IT Auditor &ndash; GRC to evaluate and improve the effectiveness of IT controls, risk management, and governance processes. The role involves assessing compliance with regulatory requirements, identifying control gaps, and recommending improvements to strengthen the organization&rsquo;s IT risk posture.</p><p><b>Key Responsibilities:</b></p><ul><li>Conduct IT audits covering systems, applications, infrastructure, and processes.</li><li>Evaluate the design and effectiveness of IT general controls (ITGCs).</li><li>Assess compliance with internal policies, standards, and external regulations.</li><li>Perform risk assessments and contribute to the development of audit plans.</li><li>Identify control weaknesses and provide actionable recommendations.</li><li>Review access controls, change management, and data security practices.</li><li>Collaborate with business and IT teams to ensure remediation of audit findings.</li><li>Prepare audit reports and present findings to stakeholders and management.</li><li>Support governance frameworks and risk management initiatives.</li><li>Monitor emerging IT risks, cybersecurity threats, and regulatory changes.</li></ul><ul><li>Strong understanding of ITGC, risk frameworks, and internal controls.</li><li>Professional certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor are preferred.</li></ul><p><b>Key Skills &amp; Competencies:</b></p><ul><li>Knowledge of GRC frameworks (e.g., COBIT, ISO 27001, NIST).</li><li>Familiarity with regulatory requirements and standards.</li><li>Strong analytical and problem-solving skills.</li><li>Excellent report writing and communication abilities.</li><li>Ability to work independently and manage multiple priorities.</li><li>Attention to detail with a risk-focused mindset.</li></ul><p><b>Preferred Experience:</b></p><ul><li>Experience with ERP systems (e.g., SAP, Oracle).</li><li>Exposure to cloud environments and cybersecurity audits.</li><li>Prior experience in financial services, telecom, or large enterprises is an advantage.</li></ul><p><b>Key Performance Indicators (KPIs):</b></p><ul><li>Timely completion of audit assignments.</li><li>Quality and impact of audit findings and recommendations.</li><li>Effectiveness of risk mitigation and control improvements.</li><li>Stakeholder satisfaction and audit report quality.</li></ul><p>Job Type: Full-time</p><p>Pay: AED6,000.00 - AED15,000.00 per month</p><p>Work Location: In person</p>

IT Auditor - GRC

Search 1505+ Cybersecurity auditor jobs near you this April. New roles added regularly across leading industries. Apply today.