information security auditor

The Certification International

Hiring: Lead Auditor &ndash; IMS, Information Security &amp; Food SafetyWe are seeking a highly qualified Lead Auditor with strong experience in:Integrated Management Systems (IMS)(ISO 9001 &ndash; ISO 14001 &ndash; ISO 45001)Information Security &amp; Business Continuity(ISO 27001 &ndash; ISO 22301)Food Safety Management Systems(ISO 22000 &ndash; HACCP &ndash; FSSC 22000)Responsibilities: Conduct certification and surveillance audits according to international standardsPrepare audit reports with professional accuracyEnsure clients&rsquo; compliance with quality, environmental, occupational health &amp; safety, information security, business continuity, and food safety requirementsSupport continuous improvement initiativesRequirements: Certified Lead Auditor for IMS, Information Security, and Food SafetyStrong knowledge of ISO standardsExcellent communication &amp; reporting skillsAbility to travel and handle multiple auditsJob Type: Part-time

LEAD AUDITOR

US Signal

<div>Description:

US Signal is a leading data center services provider, offering secure, reliable network, cloud hosting, colocation, data protection, and disaster recovery services &mdash; all powered by its expansive, robust fiber network. US Signal also helps customers optimize their IT resources through the provision of managed services and professional services.
We are seeking an Internal Auditor to join our team! This role can work remote with occasional travel to our Headquarters in Grand Rapids, MI or hybrid if near Headquarters.
The Internal Auditor role provides independent assurance that the organization's risk management, governance, and internal control systems are functioning effectively. Supports the integrity and security of operations by conducting audits and assessments under the direction of senior and executive leadership. Focus on technology, cybersecurity, and compliance risks unique to a fast-growing cloud-based environment.
Functions/Responsibilities:<ul><li>
Audit Execution &amp; Reporting: Plan and conduct IT audits, risk assessments, and independent gap analyses. Prepare audit reports summarizing finding, risk, and actionable recommendations for review by management and the Information Security Program Committee.</li><li>
Risk &amp; Compliance Oversight: Manage the company&rsquo;s risk management program, including assessments, mitigation strategies, and maintaining the risk register; ensure compliance with internal security policies.</li><li>
Third-Party Audit Coordination: Lead and manage external audits conducted by a third-party audit firm on standards such as SOC 1, SOC 2, HIPAA, ISO27001, and PCI, ensuring alignment with industry standards and business objectives.</li><li>
Collaborate with IT, Security, Finance, and Compliance teams to assess processes, identify risks, and ensure compliance with internal policies and external requirements for existing systems and systems under development, including major IT initiatives.</li><li>
Special Projects &amp; Cross-Functional Collaboration: Participate in fraud investigations, policy development and updates, and acquisition due diligence. Partner with departments across the organization to support key initiatives, and travel as required to conduct on-site audits throughout the company&rsquo;s network.</li></ul>
Requirements:

What you bring to the team:<ul><li>
Familiarity with compliance standards (ISO27001, PCI, HIPAA, GDRP, NIST, SOC1 &amp; SOC2).</li><li>
Valid driver&rsquo;s license and insurance</li><li>
Experience with Internal Audit reporting</li><li>
Perform with a high degree of accuracy and proven ability to meet deadlines</li><li>
Be Transparent: Integrity, Communication, Trustworthiness</li><li>
Act Like an Owner: Accountability, Leadership, Business Acumen</li><li>
Know the Mission: Mission Alignment, Strategic Awareness</li></ul>
Education:<ul><li>
Bachelor's Degree or 4+ Years Professional Experience in Information Technology or Information Assurance</li></ul>
Experience:<ul><li>
4+ Years Experience in internal audit, risk, or compliance, preferably in the technology sector</li></ul>
Required License(s)/Certification(s):<ul><li>
Certified Information Systems Auditor (CISA) or Certified Internal Auditor (CIA) certification, strongly preferred</li></ul>
What We Offer:
In return for your hard work and commitment, you will enjoy a supportive and inclusive workplace, along with the following benefits:<ul><li>
Generous paid time off policy, including vacation and 10 paid holidays</li><li>
Competitive and comprehensive medical, dental, and vision benefits plans with Flexible Spending benefits including medical/dental expenses and dependent care</li><li>
401(k) retirement plan with a generous contribution</li><li>
Group Term Life Insurance covered 100% by employer</li><li>
Wellness Incentive to promote overall employee well-being</li><li>
Paid volunteer time</li><li>
Business casual dress code</li></ul>
Working Conditions and Physical Demands:
This position may be performed in either a standard office setting or a home office environment. It requires prolonged periods of sitting, frequent use of a computer and other office equipment, and effective time management in a self-directed work environment. Occasional lifting of items up to 25 pounds may be required.
All US Signal employees will comply with US Signal Information Security policies to ensure the confidentiality, integrity, and availability of US Signal and customer data. All employees are responsible to ensure actions comply with state and federal regulations and requirements.
We are interested in every qualified candidate who is eligible to work in the United States. However, we are not able to sponsor visas at this time.
US Signal is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
Salary of $65,000-$90,000</div>

Internal Auditor | Grand Rapids, MI or Remote

MissionSquare Retirement

<div>Join a great place to work with MissionSquare, a financial services corporation with approximately $79 billion in assets under management and administration and over 600 employees. Founded in 1972, MissionSquare is dedicated to the retirement needs of public sector employees. We focus on delivering results-oriented retirement and retiree health savings plans, education, investment options, personalized guidance, and related services to public sector participants in more than 9,200 plans and nearly 2 million participant accounts. We strive to make the administration of retirement programs as easy and cost-effective as possible. We have an extraordinary talent base and invite you to consider joining MissionSquare.
$0.00 - $0.00
Position Title: Internal Auditor &ndash; Internal Auditor &ndash; IT
Reports to Internal Audit Manager &ndash; Info Tech
MissionSquare&rsquo;s Internal Audit Division seeks a self-motivated individual seeking comprehensive IT and Information Security audit work experience. This is a temporary job opportunity at our headquarters located in Washington, DC, just two blocks from Union Station, where you can catch the Metro or a commuter train (VRE or MARC) beginning mid-June and ending in August 2026.
The company is currently operating in a hybrid model, and the candidate will be required to come into the office once a week, on Tuesday.
<div>Essential Job Functions:
</div><ul><li>Performing audit procedures to assess the Information Technology (IT) and Information Security (IS) control environment relating primarily, but not exclusively, to logical access and change management
</li><li>Preparing walkthrough narratives and flowcharts and assisting with risk assessments. Additionally, the candidate would be responsible for performing any research necessary to gain a better understanding of the underlying business processes, technology, security, legal and regulatory requirements, and the key risks associated therewith.
</li><li>Working with external auditors, from a big four audit firm to complete testing of IT General Controls in support of an SSAE 18 (SOC 1) report.
</li><li>Communicating &amp; validating audit results with clients, preparing thorough written reports and providing oral presentations for management at various levels of the corporation.
</li></ul><div>Required Skills/Knowledge/Experience:
</div><ul><li>The candidate should be an upperclassman, recent graduate or graduate student interested in Information Technology and Security audit and compliance, majoring in a corresponding field.
</li><li>Excellent oral and written communication skills
</li><li>Strong analytical skills and proficiency in working with MS Office
</li></ul><div>Number of years of experience: None to one year
Compensation:
$25 per hour for Undergraduate / $30 per hour for Graduate Student
Technical/Functional Skills:
</div>Required
Preferred
Bachelor&rsquo;s degree in accounting, cyber security, or management information systems
Audit and compliance background and experience
Excellent oral and written communication skills
Strong analytics skills
Proficiency in working with MS Office
Ability to work independently as well as in teams
The following Core Competencies are required for all positions: Customer Focus, Integrity &amp; Trust, and Drive for Results.
Required
Preferred
The candidate should demonstrate customer focus, Integrity &amp; Trust and Drive for Results
Familiarity with data analysis tools such as Power BI
Ability to meet the deadlines
Proactive and taking initiatives
Minimum education preferred:
 High School or equivalent experience
 BA/BS or equivalent experience (pursing undergraduate degree is acceptable)
Note: Nothing in this job description restricts management&rsquo;s right to assign or reassign duties and responsibilities to this job at any time.
 To benefit your career and support your wellbeing, we offer:
<ul><li>Competitive Total Rewards package , including base pay, incentive programs, benefits, and a 401(k) plan with matching contributions
</li><li>Flexible and hybrid work schedules to support work-life balance
</li><li>Tuition reimbursement to support continued education
</li><li>Professional and career development opportunities , including courses and certifications
</li><li>Comprehensive wellness programs promoting physical, mental, and emotional health
</li><li>Volunteerism initiatives to encourage community engagement</li></ul> 
Equal Employment Opportunity
As a company, MissionSquare is an Equal Opportunity Employer. We strive to create an environment that reflects the value and diversity of our employees and fosters respect among them. We believe that talent from diverse backgrounds will further enhance our ability, and mission, to serve those who serve their communities.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, or any other protected classifications under any applicable law. 
 
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.</div>

Contract Temporary

Blue Yonder

<div><div>Scope:</div><div></div><ul><li>
Plan, execute, and report on internal audits to evaluate the effectiveness, adequacy, and compliance of the organization&rsquo;s Information Security Management System (ISMS) for both product ISMS and internal ISMS as per ISO 27001:2022 standards.</li><li>
Conduct regular SOX activities, ITGC testing, and other IT audits as required.</li><li>
Identify gaps, assess risks, and recommend corrective and preventive actions to support continuous improvement and readiness for certification and surveillance audits.</li><li>
Provide strong expertise in information security controls, risk assessment methodologies, and audit best practices to strengthen the organization&rsquo;s governance and compliance posture.</li></ul><div></div><div>
What You Will Do:</div><div></div><ul><li>
Develop and implement a risk‑based annual internal audit plan for ISMS, including audit frequency, scope, and objectives; map audit activities to the 93 controls in ISO 27001:2022 Annex A.</li><li>
Conduct comprehensive ISMS internal audits covering Clauses 4&ndash;10 and Annex A controls, including technical areas (encryption, network security, access control) and organizational controls (policies, HR security).</li><li>
Review ISMS documentation such as Scope, Policies, SOA, Risk Assessment, etc., for completeness and conformance to ISO 27001 requirements.</li><li>
Prepare detailed audit reports for senior management and the Board, highlighting non‑conformities, opportunities for improvement, and corrective action recommendations.</li><li>
Track remediation of findings, follow up with stakeholders, and verify implementation of corrective actions.</li><li>
Collaborate with process owners and IT management to foster a proactive security and compliance culture.</li><li>
Provide expert guidance on ISO 27001 requirements, interpretation of controls, and best practices for certification readiness.</li><li>
Prepare the organization for external certification and surveillance audits, managing documentation, alignment, and audit readiness.</li><li>
Conduct interviews and walkthroughs with process owners and SMEs using a consultative and evidence‑based approach.</li><li>
Facilitate development of audit observations, recommendations, and corrective actions; escalate issues as appropriate.</li><li>
Maintain communication with external auditors, ensuring alignment on scope, timelines, and observations.</li><li>
Perform special audits as assigned by Senior Management or the Audit Committee.</li><li>
Use data, metrics, and analytics to inform audit conclusions and support decision‑making.</li><li>
Uphold the firm&rsquo;s Code of Ethics and Business Conduct in all audit activities.</li></ul><div></div><div>
What We Are Looking For:</div><div></div><ul><li>
Bachelor&rsquo;s degree in Information Technology, Computer Science, Information Security, or a related field.</li><li>
6+ years of experience in IT auditing with strong exposure to ISO 27001 implementation or auditing.</li><li>
Strong technical understanding of:<ul><li>
ISO/IEC 27001:2022, ISO/IEC 27002:2022</li><li>
Risk management frameworks</li><li>
IT General Controls (ITGCs)</li><li>
Cloud infrastructure, IAM, data protection mechanisms</li></ul></li><li>
Ability to conduct technical and organizational control testing with strong documentation and reporting skills.</li><li>
Experience in Big 4 or large audit consulting environments highly desirable.</li><li>
Strong communication, stakeholder management, and audit execution skills.</li><li>
Ability to work independently and manage multiple audits in a fast‑paced environment.</li></ul><div>
Certification:</div><ul><li>
Mandatory Certification: ISO 27001 Lead Auditor or Internal Auditor (CQI/IRCA or equivalent)</li></ul><ul><li>
Preferred Certifications: CISA, CISM, CISSP</li></ul><div></div><div>
Our Values</div><div> 
If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success &ndash; and the success of our customers. Does your heart beat like ours? Find out here: <div>Core Values</div></div><div></div><div>
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.</div></div>

Sr. Internal Auditor - IT

BayOne Solutions

<div>
 
 
 Position: Cyber Security Control Assessor
 
 
 
 
 Location: Oakland, CA (Hybrid)
 
 
 
 
 Duration: Long Term Contract
 
 
 
 
 
 
 
 Duties and Responsibilities
 
 
 
 &bull; Perform multi-platform (application, database, operating system, middleware, monitoring tools, and business processes) level assessments based on predefined test objectives and test plans. Perform retest of controls that have been remediated or updated as a result of previously identified deficiencies.
 
 
 Obtain, review, and interpret evidence provided to validate controls are performed effectively.
 
 
 &bull; Execute and report on results of IT Compliance assessments in accordance with industry best practices and established regulatory standards and requirements (e.g., NIST SP800-53, SP800-115, SOX, NERC CIP).
 
 
 &bull; Obtain, review, and interpret organizational IT policies, standards and procedures to identify control points that would assist in mitigating risk to the business.
 
 
 &bull; Review test results or interpret evidences to address vulnerabilities, gaps, or control deficiencies; work with stakeholders to establish plans for sustainable resolution.
 
 
 &bull; Identify risks associated with control failures and supports the identification of mitigating controls
 
 
 &bull; Partner with control owners to ensure control documentation is updated periodically to reflect current control environment
 
 
 &bull; Perform other tasks as necessary to ensure that the Compliance meets its commitments to customers
 
 
 &bull; Support the Compliance Sr. Manager/Manager as needed.
 
 
 
 
 
 
 Minimum Education Required:
 
 
 
 &bull; BA/BS in Computer Science, Business, or equivalent experience.
 
 
 Minimum On-the-Job Experience
 
 
 &bull; Minimum of 3 years of general IT experience, including IT security or IT risk management experience
 
 
 &bull; Experience using Excel worksheets, workbooks, and formulas
 
 
 &bull; Experience managing multiple projects with conflicting priorities
 
 
 
 
 
 
 Minimum Required License / Certification:
 
 
 
 At least one existing certification from the following list, which must be currently maintained and valid: certification:
 
 
 &bull; Cisco Certified Networking Associate (CCNA)
 
 
 &bull; Certified Information Systems Auditor (CISA);
 
 
 &bull; Certified in Risk and Information System Control (CRISC);
 
 
 &bull; Certified Internal Auditor (CIA);
 
 
 &bull; Certified Information Systems Security Professional (CISSP);
 
 
 
 
 
 
 Knowledge, Skills, and Abilities
 
 
 
 &bull; Strong oral and written communication skills
 
 
 &bull; Strong analytical skills
 
 
 &bull; Understanding of application, database, network and systems security
 
 
 &bull; Understanding of general computing controls (GCCs)
 
 
 &bull; Able to identify complex control gaps.
 
 
 &bull; Understanding of generally applicable and accepted auditing standards and framework (e.g. COBIT) and best practices for IT services management (e.g., ITIL), regulatory standards and requirements (e.g. Sarbanes Oxley Act, NERC/CIP)
 
 
 &bull; Excellent planning, organizational, and project management skills
 
 
 &bull; Able to multi-task projects or assessments
 
 
 &bull; Ability to work with minimal supervision in a fast-paced environment
 
 
 &bull; Detail oriented
 
</div>

Cyber Security Analyst

Dubai Careers - A Smart Dubai Initiative

<div>
 
 Job Description
 
 
 
 
 
 Overall Purpose
 
 
 
 
 To plan, execute, and deliver IT audit assignments that evaluate the adequacy and effectiveness of IT controls, governance, risk management, and compliance with policies and regulations. The role provides assurance on the security, reliability, and integrity of IT systems and processes, while also supporting business improvement initiatives.
 
 
 
 
 Key Responsibilities
 
 
 
 
 <ul>
 <li>
 Lead and conduct risk-based IT audits, including infrastructure, applications, cybersecurity, databases, and IT operations.
 </li>
 <li>
 Evaluate the effectiveness of IT general controls (ITGCs), application controls, and automated business processes.
 </li>
 <li>
 Review IT security practices, access management, and data protection measures.
 </li>
 <li>
 Assess IT governance frameworks, policies, and compliance with international standards.
 </li>
 <li>
 Identify control gaps, risks, and opportunities for improvement, and develop practical recommendations.
 </li>
 <li>
 Prepare clear, concise audit reports and present findings to management.
 </li>
 <li>
 Provide advisory support on new IT initiatives, system implementations, and emerging risks.
 </li>
 <li>
 Mentor junior auditors and provide guidance during assignments.
 </li>
 <li>
 Stay updated on industry trends, emerging technologies, and cybersecurity threats.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 
 Qualifications &amp; Experience:
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Technology, Computer Science, or related field.
 </li>
 <li>
 Professional certifications (preferred):
 </li>
 <ul>
 <li>
 CIA (Certified Internal Auditor)
 </li>
 <li>
 ACCA (Association of Chartered Certified Accountants)
 </li>
 <li>
 CPA (Certified Public Accountant
 </li>
 <li>
 CA (Chartered Accountant)
 </li>
 </ul>
 <li>
 5&ndash;8 years of IT audit, cybersecurity, or information security experience, with at least 2 years in a senior role.
 </li>
 <li>
 Strong knowledge of IT systems, networks, databases, and ERP systems (e.g., SAP, Oracle).
 </li>
 <li>
 Familiarity with international auditing standards and IT frameworks (ISACA, IIA).
 </li>
 <li>
 Excellent analytical, communication, and report-writing skills.
 </li>
 </ul>
 
 
 Key Skills
 
 
 
 
 <ul>
 <li>
 IT risk assessment &amp; management
 </li>
 <li>
 Cybersecurity and data protection
 </li>
 <li>
 Audit planning &amp; execution
 </li>
 <li>
 Problem-solving and critical thinking
 </li>
 <li>
 Stakeholder management and presentation skills
 
 
 </li>
 </ul>
 
 Job Category
 
 
 
 Audit
 
 
 
 Advertiser
 
 
 
 Financial Audit Authority
 
 
 
 Educational-level
 
 
 
 Bachelor
 
 
 
 Required Nationality
 
 
 
 UAE Only
 
 
 
 Monthly Salary
 
 
 
 Unspecified
 
 
 
 Schedule-Time
 
 
 
 Full time
 
 
 
 Job Posting
 
 
 
 18/03/2026
 
 
 
 Unposting Date
 
 
 
 17/04/2026
</div>

Senior IT Auditor

HugoBank

<div>The IT &amp; GRC Auditor will be responsible for strengthening the Bank&rsquo;s technology risk management, cybersecurity, and governance framework. The role includes conducting risk-based IT audits, reviewing internal controls, and assessing compliance with regulatory, data protection, and information security requirements across digital banking systems, cloud environments, IT operations, and GRC processes. 
Essential Duties and Responsibilities<ul><li>
Develop, maintain, and periodically update the IT &amp; Information Security audit universe, ensuring comprehensive coverage of technology risks across the Bank.</li><li>
Perform periodic risk assessments and prepare risk-based audit plans, ensuring high-risk and regulatory-critical areas are prioritized.</li><li>
Lead and execute end-to-end IT and GRC audits, including cybersecurity, digital banking platforms, application controls, IT infrastructure, cloud environments, and third-party/vendor risk management, in accordance with approved audit methodology and Internal Auditing Standards.</li><li>
Evaluate the effectiveness of IT governance, policies, processes, and internal control frameworks; identify control gaps and provide practical, risk-based recommendations.</li><li>
Assess compliance with Central Bank regulations, applicable laws, industry standards, and internal governance frameworks related to technology and information security.</li><li>
Prepare high-quality audit working papers and reports that are clear, concise, objective, and timely, ensuring audit engagements are delivered within agreed timelines and resource budgets.</li><li>
Monitor and report on the status of audit findings and management action plans, including tracking overdue items and performing follow-up reviews to validate remediation effectiveness.</li><li>
Undertake special reviews, investigations, advisory and assurance assignments as directed by the Chief Audit Executive.</li></ul> 

Requirements 
<ul><li>
Bachelor&rsquo;s in Computer science or a related field. Master&rsquo;s degree preferred.</li><li>
Professional Certifications such as CISA, CRISC, CISSP, CISM or CCSP.</li><li>
6&ndash;8 years of experience in IT Audit, Technology Risk, or Information Security within a bank, financial institution, fintech, or other regulated environment, with exposure to digital systems and technology-driven operations.
</li><li>Hands-on experience in conducting risk-based IT audits covering cybersecurity, IT general and application controls, cloud environments, third-party risk, and regulatory compliance, including audit planning, documentation, reporting, and follow-up in line with professional auditing standards.</li></ul></div>

IT & GRC Auditor

Search 10000+ Information security auditor jobs near you this March. New roles added regularly across leading industries. Apply today.