information systems auditor

Picus

<div><div>Are you passionate about technology and enjoy explaining complex solutions in a way that everybody gets excited? If so, read on!</div><div></div><div><b><br>
About Picus</b></div><div>
Picus Security, the leading security validation company, gives organizations a clear picture of their cyber risk based on business context. Picus transforms security practices by correlating, prioritizing, and validating exposures across siloed findings so teams can focus on critical gaps and high-impact fixes. With Picus, security teams can quickly take action with one-click mitigations to stop more threats with less effort.</div><div></div><div><br>
The Picus Security Validation Platform easily reaches across on-prem environments, hybrid clouds and endpoints coupled with Numi AI to provide exposure validation.</div><div></div><div><br>
The pioneer of Breach and Attack Simulation, Picus delivers award-winning threat-centric technology that allows teams to pinpoint fixes worth pursuing, offering a 98% recommendation in Gartner Peer Review.</div><div></div><div><b><br>
About The Role</b></div><div>
We are seeking a Senior IS Auditor to join our fast-growing cybersecurity company and strengthen our governance, risk, and compliance capabilities at scale. This role plays a critical part in maintaining global certification readiness, enhancing control maturity, and embedding a proactive security and privacy mindset across the organization. Beyond audit execution, you will act as a strategic advisor to business and technology teams, shaping scalable and risk-aware processes in a cloud-native and AI-driven environment. You will contribute to the continuous evolution of our governance framework, ensuring alignment with international standards while enabling innovation and sustainable growth. This position directly supports regulatory confidence and reinforces the trust our global customers place in Picus.</div><div></div><div><br>
Picus is headquartered in Ankara, with a regional office in Istanbul, but our team is remote across T&uuml;rkiye. Please note that all CVs must be submitted in English.</div>
<h3 class="jobSectionHeader"><b>What You'll Do</b></h3><ul><li>
Lead and oversee global compliance programs (ISO/IEC 27001, 22301, 27701, 20000-1, SOC 2, NIST CSF, CSA STAR) to maintain continuous audit readiness</li><li>
Plan and execute risk-based IT and internal audits, with a strong focus on secure SDLC, software engineering processes, cloud infrastructure, and AI security domains</li><li>
Evaluate and enhance the effectiveness of security and governance controls, driving continuous improvement across policies and processes</li><li>
Contribute to RFPs and security questionnaires with accurate and strategic security and compliance input</li><li>
Manage audit and security vulnerability findings end-to-end, ensuring sustainable remediation and measurable control improvements</li><li>
Actively support the Third-Party Risk Management (TPRM) program by participating in SaaS security assessments and vendor due diligence</li><li>
Define and track key audit and compliance metrics, reporting insights to leadership and relevant stakeholders</li><li>
Assess the risk and privacy impact of emerging technologies (AI, ML, and automation), guiding engineering teams on secure adoption practices.</li></ul><h3 class="jobSectionHeader"><b>
What You Have</b></h3><ul><li>
3+ years of hands-on experience in audit, compliance, risk management, or information security, preferably within a SaaS, cloud-native, or technology-driven environment</li><li>
Hands-on experience with ISO/IEC standards (27001, 27701, 22301, 20000-1) and SOC 2, including preparation, audit coordination, and evidence management</li><li>
Experience advising cross-functional stakeholders and influencing control improvements in dynamic technology environments</li><li>
Practical knowledge of international security and privacy regulations (e.g., GDPR, CCPA) and related compliance practices</li><li>
Experience supporting or managing Third-Party Risk Management (TPRM), vendor due diligence, and customer-facing compliance processes</li><li>
Proven ability to manage multiple audits and compliance initiatives simultaneously in a fast-paced environment</li><li>
Strong verbal and written communication skills in English, including documentation and policy writing.</li></ul><div></div><div><b><br>
Preferred Certifications:</b></div><ul><li>
ISO 27001, 22301, 27701, 20000-1 LA</li><li>
ISACA certifications such as CISA, CISM, or CRISC</li><li>
Experience with SOC 2, NIST, CSA STAR reporting frameworks</li><li>
ITIL certification (nice-to-have)</li></ul><div><b>
Working at Picus</b></div><div>
Fascinating work - a chance to shape and lead an exciting, fast-growing cyber security segment. Security Validation is a concept that helps organizations evaluate their security posture in a continuous, automated, and repeatable way. This approach allows for the identification of imminent threats, provides recommended actions, and produces valuable metrics about cyber-risk levels.</div><div></div><div><br>
Unlimited opportunity! We are growing. At Picus, you'll be provided with as much responsibility as you can handle - new career development opportunities constantly arise given our rate of growth.</div><div></div><div><br>
Global exposure - Get a lot of experience working not only in a fast-growing startup but also interact with customers all around the world.</div><div></div><div><br>
Be part of a global remote team who is taking on Exposure Validation and a growing market segment.</div><div></div><div><br>
We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to age, sex, race, color, national origin, religious belief, gender or gender reassignment, sexual orientation, marriage or civil partnership, pregnancy and maternity, disability, protected veteran status, or any other characteristic protected by International law. Upon conditional offer of employment, candidates are required to complete reference and identity checks in line with local labor laws and as per the Company&rsquo;s employment policy.</div><div></div><p><br>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

Senior Information Systems Auditor

University of California Los Angeles

<div><div><div><div><div><b>Join UCLA as a Senior IT Auditor &ndash; Drive Innovation, Integrity, and Impact</b></div><div></div><div><br>
Are you a forward-thinking IT audit professional ready to make a meaningful impact at a world-renowned institution? UCLA is seeking a <b>Senior IT Auditor</b> to play a critical role in strengthening technology governance, risk management, and compliance across a dynamic, complex environment.</div><div></div><div><br>
In this role, you&rsquo;ll partner with leadership and cross-functional teams to assess IT controls, identify risks, and recommend strategic improvements that enhance operational effectiveness and safeguard critical systems and data. You&rsquo;ll work on high-visibility audits spanning cybersecurity, cloud environments, enterprise systems, and emerging technologies&mdash;helping UCLA stay at the forefront of innovation while maintaining the highest standards of accountability.</div><div></div><div><br>
If you&rsquo;re passionate about leveraging your IT audit expertise to support a mission of education, research, and public service, this is your opportunity to make a lasting difference.</div><br>
<br>
<p><b>Salary &amp; Compensation</b></p><br>
<br>
<ul><li>UCLA provides a full pay range. Actual salary offers consider factors, including budget, prior experience, skills, knowledge, abilities, education, licensure and certifications, and other business considerations. Salary offers at the top of the range are not common. Visit UC Benefit package to discover benefits that start on day one, and UC Total Compensation Estimator to calculate the total compensation value with benefits.
</li></ul><p><b>Qualifications</b></p><br>
<ul><li>
5+ Years External or Internal IT Auditor, or equivalent experience (Required)
</li></ul><ul><li>5+ Years Public accounting experience, not-for-profit, higher education, and/or healthcare industry experience (Preferred)
</li></ul><ul><li>Demonstrated ability to perform complex IT audit and advisory projects from planning through reporting, delivering value and quality. (Required)</li></ul>
<ul><li>Demonstrated working knowledge of information technology concepts (including, but not limited to: identity and access management, vulnerability management, data governance and protection, IT general controls, change management, incident response and recovery, IT asset management) (Required)</li></ul>
<ul><li>Demonstrated ability to apply established internal auditing, NIST, and ISO standards, procedures, and techniques in the performance of information technology audits as well as advisory projects. (Required)</li></ul>
<ul><li>Ability to design clear, concise, and relevant audit procedures that adequately address the audit objectives. (Required)</li></ul>
<ul><li>Skill in communicating effectively with all levels of auditee personnel, both on a one-to-one basis and in group presentations, stressing qualities of tact, discretion, and persuasiveness. Ability to navigate difficult conversations and is solution oriented. (Required)</li></ul>
<ul><li>Knowledge of emerging trends around internal audit, NIST, and ISO standards, procedures, and techniques. (Required)</li></ul>
<ul><li>Ability to establish and maintain collaborative working relationships with team members, management, campus personnel, and leadership. Ability to effectively work in a team to deliver audit and advisory projects within a defined timeline. (Required)</li></ul>
<ul><li>Self-starter, ability to work independently, determine priorities across multiple projects, and takes ownership of responsibilities. Actively identifies, evaluates, and recommends solutions to overcome project obstacles. (Required)</li></ul>
<ul><li>Ability to supervise team members, provide direction, training, evaluate performance, and communicate feedback in a timely manner. (Required)</li></ul>
<ul><li>Ability to write clear, concise, and logical audit reports that describe the background, scope, objective, procedures performed, and observations identified &ndash; including root cause, risk to the organization, and actionable recommendations. (Required)</li></ul>
<ul><li>Experience with audit management software, data analytic tools (Tableau, Power BI), Microsoft tools, and/or artificial intelligence tools (CoPilot) (Preferred)</li></ul>
<br>
<p><b>Education, Licenses, Certifications &amp; Personal Affiliations</b></p><br>
<ul><li>
Bachelor's Degree Bachelor's degree in related area and/or equivalent experience/training (Required)
</li></ul><ul><li>()
</li><li>Must hold professional certification in a related designation, e.g., CIA, CPA, CFE, CISA, CFSA, CFGM (Required)
</li></ul><ul><li>IT-focused credentials such as CISA, CISSP, or other relevant cybersecurity certifications (Preferred)
</li></ul><br>
<p><b>Special Conditions for Employment</b></p><br>
<ul><li>
Background Check: Continued employment is contingent upon the completion of a satisfactory background investigation.</li></ul>
<ul><li>Conflict of Interest: The position is subject to the University Conflict of Interest Code required by the Political Reform Act of 1974. The candidate(s) selected will be required to complete financial statements for public record.</li><li>
5% Less than 5% for Conferences and Training
</li></ul><br>
<p><b>Schedule</b></p><br>
<br>
8:00 a.m. to 5:00 p.m.
<br>
<p><b>Union/Policy Covered</b></p><br>
<br>
99-Policy Covered
<br>
<p><b>Complete Position Description</b></p><br>
<br>
https://universityofcalifornia.marketpayjobs.com/ShowJob.aspx?EntityID=38&amp;JDName=Audit%20Professional%203%20(40178399)</div></div></div><div><div><div><p>
Apply</p></div></div></div></div>
<br><div><div><b>Campus Requisition #:</b></div>
<p>10111</p>
<div><b>UC Payroll Title:</b></div>
<p>AUDIT PROFL 3</p>
<div><b>Department:</b></div>
<p>AUDIT &amp; ADVISORY SERVICES</p>
<div><b>Appointment Type:</b></div>
<p>2 - Staff: Career</p>
<div><b>Anticipated Hiring Pay Scale:</b></div>
<p>$110,000-$119,000 Annually</p>
<ul><li><b>Full Salary Range:</b></li></ul>
<p>USD $78,500.00/Yr. - USD $163,600.00/Yr.</p>
<div><b>Onsite | Remote | Hybrid Type:</b></div>
<p>Hybrid</p>
<div><b>Department Location:</b></div>
<p>10920 Wilshire Blvd Audit and Advisory Services
</p><div><b>Full or Part Time:</b></div>
<p>Full Time</p></div>

Senior Auditor - IT

Dubai Careers - A Smart Dubai Initiative

<div>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 <strong>
  <strong>
   Overall Purpose
   <br/>
   <br/>
  </strong>
 </strong>
 To plan, execute, and deliver IT audit assignments that evaluate the adequacy and effectiveness of IT controls, governance, risk management, and compliance with policies and regulations. The role provides assurance on the security, reliability, and integrity of IT systems and processes, while also supporting business improvement initiatives.
 <br/>
 <br/>
 <strong>
  <strong>
   Key Responsibilities
   <br/>
   <br/>
  </strong>
 </strong>
 <ul>
  <li>
   Lead and conduct risk-based IT audits, including infrastructure, applications, cybersecurity, databases, and IT operations.
  </li>
  <li>
   Evaluate the effectiveness of IT general controls (ITGCs), application controls, and automated business processes.
  </li>
  <li>
   Review IT security practices, access management, and data protection measures.
  </li>
  <li>
   Assess IT governance frameworks, policies, and compliance with international standards.
  </li>
  <li>
   Identify control gaps, risks, and opportunities for improvement, and develop practical recommendations.
  </li>
  <li>
   Prepare clear, concise audit reports and present findings to management.
  </li>
  <li>
   Provide advisory support on new IT initiatives, system implementations, and emerging risks.
  </li>
  <li>
   Mentor junior auditors and provide guidance during assignments.
  </li>
  <li>
   Stay updated on industry trends, emerging technologies, and cybersecurity threats.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <strong>
  <strong>
   Qualifications &amp; Experience:
   <br/>
   <br/>
  </strong>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Information Technology, Computer Science, or related field.
  </li>
  <li>
   Professional certifications (preferred):
  </li>
  <ul>
   <li>
    CIA (Certified Internal Auditor)
   </li>
   <li>
    ACCA (Association of Chartered Certified Accountants)
   </li>
   <li>
    CPA (Certified Public Accountant
   </li>
   <li>
    CA (Chartered Accountant)
   </li>
  </ul>
  <li>
   5&ndash;8 years of IT audit, cybersecurity, or information security experience, with at least 2 years in a senior role.
  </li>
  <li>
   Strong knowledge of IT systems, networks, databases, and ERP systems (e.g., SAP, Oracle).
  </li>
  <li>
   Familiarity with international auditing standards and IT frameworks (ISACA, IIA).
  </li>
  <li>
   Excellent analytical, communication, and report-writing skills.
  </li>
 </ul>
 <strong>
  <strong>
   Key Skills
   <br/>
   <br/>
  </strong>
 </strong>
 <ul>
  <li>
   IT risk assessment &amp; management
  </li>
  <li>
   Cybersecurity and data protection
  </li>
  <li>
   Audit planning &amp; execution
  </li>
  <li>
   Problem-solving and critical thinking
  </li>
  <li>
   Stakeholder management and presentation skills
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Job Category
  <br/>
  <br/>
 </strong>
 Audit
 <br/>
 <br/>
 <strong>
  Advertiser
  <br/>
  <br/>
 </strong>
 Financial Audit Authority
 <br/>
 <br/>
 <strong>
  Educational-level
  <br/>
  <br/>
 </strong>
 Bachelor
 <br/>
 <br/>
 <strong>
  Required Nationality
  <br/>
  <br/>
 </strong>
 UAE Only
 <br/>
 <br/>
 <strong>
  Monthly Salary
  <br/>
  <br/>
 </strong>
 Unspecified
 <br/>
 <br/>
 <strong>
  Schedule-Time
  <br/>
  <br/>
 </strong>
 Full time
 <br/>
 <br/>
 <strong>
  Job Posting
  <br/>
  <br/>
 </strong>
 18/03/2026
 <br/>
 <br/>
 <strong>
  Unposting Date
  <br/>
  <br/>
 </strong>
 17/04/2026
</div>


Senior IT Auditor

United States Capitol Police

<div><div><h2 class="jobSectionHeader"><b>Summary</b></h2>
<p>The United States Capitol Police (USCP) safeguards the Congress, Members of Congress, employees, visitors, and Congressional buildings and grounds from crime, disruption, and terrorism. We protect and secure Congress so it can fulfill its constitutional and legislative responsibilities in a safe, secure and open environment.</p></div></div>
<br><div><div><h2 class="jobSectionHeader"><b>This job is open to</b></h2>
</div><div><div><div><h3 class="jobSectionHeader"><b>The public</b></h3>
</div><div>U.S. Citizens, Nationals or those who owe allegiance to the U.S.
</div></div></div><h3 class="jobSectionHeader"><b>Clarification from the agency</b></h3>
<p>Navigate to the following URL to apply to this job: &lt;a href=&quot;https://uscp.csodfed.com/ux/ats/careersite/1/home?c=uscp&amp;source=USA&quot;&gt;USCP Careers&lt;/a&gt;</p></div>
<br><div><div><h2 class="jobSectionHeader"><b>Duties</b></h2>
</div><p></p><p>Responsibilities</p><p>
As an Information Technology (IT) Auditor within the OIG Audits Division, the incumbent will help USCP effectively and efficiently carry out its vital mission of protecting and securing Congress so it can fulﬁll its constitutional and legislative responsibilities in a safe, secure, and open environment. The selected candidate will plan, conduct, analyze, and report to the Assistant Inspector General for Audits (AIGA) on a variety of audits, inspections, evaluations, and reviews of USCP&rsquo;s complex information systems infrastructure and data to verify that its information resources provide the highest level of security, reliability, and value expected by stakeholders. The audits conducted may involve ﬁnancial records and systems or consist of activities to review and evaluate the performance of an entity&rsquo;s assigned functions or activities involved in the detection of waste, fraud, and abuse.<br>
The assignments typically involve interrelationships between and among programs, systems, functions, policies, and various issues. The incumbent represents the OIG before USCP officials, the Capitol Board Police, Congressional staff, the Council of Inspectors General on Integrity and Efficiency, and the public at large.<br>
<br>
Primary duties include:<br>
<br>
Comprehensively planning, conducting, analyzing, and reporting on complex IT systems, applications, and infrastructure through audits, inspections, evaluations, or reviews.</p><p>
Evaluating IT governance, risk management, internal control frameworks, cybersecurity measures, and compliance with regulations and best practices.</p><p>
Identifying vulnerabilities and recommending improvements to strengthen security and operational efficiency.</p><p>
Following recommendations through corrective actions, remediation, and closure.
</p><p>Analyzing the development, implementation, acquisition, security, and internal controls of IT networks, systems, and applications particularly as they relate to the use of IT in USCP operations and mission support activities.</p><p>
Independently conducting multiple technically complex engagements concurrently.</p><p>
Coordinating with and leveraging off knowledge and work performed by USCP OIG auditors, inspectors, evaluators, and investigators.</p><p>
Resolving issues encountered in the engagements where the governing laws and/or regulations require interpretation and/or the precedents are non-existent, obscure, or conﬂicting.</p><p>
Writing reports and work papers that support ﬁndings and recommendations for improvement in USCP programs and activities.</p><p>
Supporting or leading meetings with USCP officials, including interviews and presentations of audit ﬁndings, conclusions, and recommendations.</p><p>
Providing technical and policy direction and guidance to team members and within the OIG.</p></div><p></p>
<br><div><div><h2 class="jobSectionHeader"><b>Requirements</b></h2>
</div><h3 class="jobSectionHeader"><b>Conditions of employment</b></h3>
<p>You must be a U.S. Citizen Successful completion of a background investigation is required. Must complete a one-year probationary period. Must have Direct Deposit. Must be able to obtain and maintain a Top Secret Clearance. This position is ELIGIBLE for telework as determined by the OIG policy. *THIS IS NOT A REMOTE POSITION*
</p><h3 class="jobSectionHeader"><b>Qualifications</b></h3>
<p></p><p>In order to qualify, you must meet the education and/or experience requirements described below.</p><p>
Meet the minimum basic education and/or experience requirements described in the Education section below.</p><p>
Have at least one year of specialized experience equivalent to one level below this position you are applying for, which is in or directly related to the line of work of the position to be ﬁlled and which has equipped you with the knowledge, skills, and abilities to successfully perform the duties of the position. Specialized experience is deﬁned as experience performing accounting, IT auditing, auditing, ﬁnancial, or compliance work by planning, conducting audit assignments, and reporting results.</p><p>
Demonstrate excellent analytical and critical thinking skills, including the ability to identify key issues and associated root causes, propose thorough IT audit engagements, plan and execute technical audits according to applicable standards, and draw appropriate conclusions.</p><p>
Demonstrate excellent writing skills including an ability to synthesize information and produce reports that are clear, concise, accurate, and objective.</p><p>
Demonstrate excellent verbal communication skills, including the ability to articulate complex information, collect information from interviews, and customize the information presented to the audience.<br>
<br>
<b>*Salary will be commensurate with qualiﬁcations and experience*</b><br>
<br>
Highly Desired Skills<br>
<br>
Experience conducting or overseeing information technology, ﬁnancial statement, or<br>
performance audits.<br>
Information Technology (IT) Auditing experience. Advanced degree in relevant ﬁelds for this position Possess a current, relevant professional certiﬁcation Certiﬁed Information Systems Auditor (CISA)<br>
Certiﬁed Information Systems Security Professional (CISSP) Certiﬁed Ethical Hacker (CEH)<br>
Certiﬁed Public Accountant (CPA) Certiﬁed Internal Auditor (CIA) Certiﬁed Fraud Examiner (CFE)<br>
Certiﬁed Government Financial Manager (CGFM)<br>
All eligibility requirements must be met by the closing date of the vacancy announcement.</p><p>
(Information on Qualification &amp; Education is located at the following link: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/)</p>
<p></p><div><h3 class="jobSectionHeader"><b>Education</b></h3>
<p>You must meet the minimum basic educational and/or work experience requirements: 1. Bachelor's degree in information technology, information systems, information security, computer science, management information systems, cybersecurity, other IT relevant degrees, auditing, accounting, or a degree in a related ﬁeld such as business administration, ﬁnance, or public administration that included or was supplemented by 24 credit semester hours or equivalent in auditing or accounting. Or 2. At least four years of experience in accounting, IT auditing, auditing, or an equivalent combination of accounting/auditing experience, college-level education, and training that included 24 credit semester hours or equivalent in accounting, auditing, or IT-related courses.
</p></div><div><h3 class="jobSectionHeader"><b>Additional information</b></h3>
<div><div><p>Additional Conditions of Employment with the USCP: As per the Congressional Accountability Act (CAA) and the Fair Chance to Compete for Jobs Act of 2019, criminal history information will only be collected following a qualifications review and after a tentative offer of employment has been made. A criminal history does not automatically exclude an applicant from employment with the USCP. Criminal History Check - Must successfully pass a comprehensive criminal history check of the past 10 years if offered employment. A criminal history check will be performed on applicants who accept an offer of employment. Credit Check - Must successfully pass a credit check. Applicants must not be in default or delinquent on any Federal guaranteed student loans. Applicants must demonstrate a competent financial history. Financial delinquency including collection accounts, liens, repossessions, or garnishments may be a basis for disqualification. Selective Service Registration - Male applicants must provide verification of registration with the Selective Service System or must verify exemption from the Selective Service System registration because of age or military status. Female applicants are exempt from Selective Service System registration. https://www.sss.gov/verify/ Fingerprint Check - Applicants' fingerprints will be submitted to the Federal Bureau of Investigation (FBI) for a check of their criminal history record. Background Investigation - Must successfully complete all components of the USCP full field background investigation. There are few automatic grounds for rejection in the USCP background investigation process. Issues of misconduct, such as illegal drug use, arrests, or convictions, may not be automatically disqualifying. However, deliberate misstatements, omissions, or intentionally withholding required information at any phase of the hiring process will result in a candidate's disqualification regardless of the nature or reason for the misstatement or omission. The primary reason candidates fail a background investigation is due to deliberately withholding or omitting material facts. Providing false and/or misleading information may be grounds for removal from the application and selection process.</p></div></div><br>
<p></p>
<p>Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution.</p>
</div><div><div><div><div><div><h1 class="jobSectionHeader"><p>Benefits</p></h1></div></div><div>
<p>A career with the U.S. government provides employees with a comprehensive benefits package. As a federal employee, you and your family will have access to a range of benefits that are designed to make your federal career very rewarding. Opens in a new windowLearn more about federal benefits.
</p><p></p><div><p>Eligibility for benefits depends on the type of position you hold and whether your position is full-time, part-time or intermittent. Contact the hiring agency for more information on the specific benefits offered.</p></div></div></div></div></div></div>
<br><div><h2 class="jobSectionHeader"><b>How you will be evaluated</b></h2>
<p>You will be evaluated for this job based on how well you meet the qualifications above.</p>
<p>Evaluation Factors: Please address all Knowledge, Skills and Abilities (KSAs) within the narrative responses so that your experience can be evaluated properly. We will review your resume, assessment questionnaire, and supporting documentation to determine if you meet the minimum requirements for this job. If you meet the minimum requirements for this job, we will evaluate your application materials to assess the quality, depth, and complexity of your qualifications, accomplishments, experience, and education as they relate to the requirements listed in this vacancy announcement. Failure to successfully pass a full field background investigation and all segments of the pre-employment evaluation process will result in disqualification from further consideration under this vacancy announcement.</p></div>
<br><div><div><h2 class="jobSectionHeader"><b>Required Documents</b></h2>
</div><p>The following documents are required and must be received by the closing date of this announcement: 1. Your resume: Effective September 27, 2025, resume page limit is two (2) pages and should include a description of related job duties as well as dates of employment (mm/yy). Margins cannot be smaller than .5 all around and the font no smaller than 11-point. 2. Other supporting documents: - Veterans Preference Documentation, if applicable. - College transcript(s), if qualifying based on education, or other documentation to prove possession of the basic requirements for this position.
</p>
<div><h3 class="jobSectionHeader"><b>If you are relying on your education to meet qualification requirements:
</b></h3><p>Education must be accredited by an accrediting institution recognized by the U.S. Department of Education in order for it to be credited towards qualifications. Therefore, provide only the attendance and/or degrees from schools accredited by accrediting institutions recognized by the U.S. Department of Education.
</p><p>Failure to provide all of the required information as stated in this vacancy announcement may result in an ineligible rating or may affect the overall rating.</p></div></div>
<br><div><div><h2 class="jobSectionHeader"><b>How to Apply</b></h2>
</div><div><div><p>Navigate to the following URL to apply to this job: USCP Careers 1. Follow the prompts to upload your resume and/or other supporting documents and complete the occupational questionnaire. 2. Click the Submit Application button to submit your application package. 3. It is your responsibility to ensure your responses and appropriate documentation are submitted prior to the closing date. 4. To verify that your application is complete, log into your account and select the job posting for this position. The page will display the status of your application, the documentation received, and any correspondence the Department has sent related to this application. 5. Failure to provide all required documents and information requested by the closing date of this announcement may result in your application not being considered. The complete application package must be submitted by 7:59 PM (ET) on the closing date to receive consideration.</p></div><p><br>
</p></div>
<div><h3 class="jobSectionHeader"><b>Agency contact information</b></h3>
<div></div><div><div><div>Email</div>
<div>yetreta.washington@uscp.gov
</div></div><div><div>Address</div>
<div><div><i>Office of Inspector General</i><br>
<i>119 D Street NE</i><br>
<i>Washington, DC 20510</i><br>
<i>
</i></div></div></div></div></div><h3 class="jobSectionHeader"><b>Next steps</b></h3>
<div><div><p>After a review of your application materials is made, you will be notified of your eligibility status. If you are referred to the hiring official, you will receive further notification. If further evaluation or interviews are required, you will be contacted. Please note that if you are not selected for this position, the USCP may not be able to provide specific feedback or disclose the reasons for your disqualification, due to confidentiality and legal considerations related to the hiring process.</p></div></div></div><p></p>
<br><div><div><h2 class="jobSectionHeader"><b>Overview</b></h2>
</div><div><div>Accepting applications</div>
<div><div>Open &amp; closing dates</div>
 <div>03/19/2026 to 03/27/2026
</div></div><div><div>Salary</div>
<div>$132,243 to - $189,308 per year
</div></div><div><div>Pay scale &amp; grade</div>
<div>CP 10 - 11</div>
</div><div><div>Location</div>
<div>1 vacancy in the following location:</div>
 <div><div><div><div>Washington, DC
</div><div>1 vacancy</div>
</div></div></div></div><div></div><div><div>Telework eligible</div>
<div>Yes&mdash;as determined by the agency policy.</div>
</div><div><div>Travel Required</div>
<div>Occasional travel - Travel may be required.</div>
</div><div><div>Relocation expenses reimbursed</div>
<div>NoN/A
</div></div><div><div>Appointment type</div>
<div>Permanent</div>
</div><div><div>Work schedule</div>
<div>Full-time</div>
</div><div><div>Service</div>
<div>Excepted</div>
</div><div><div>Promotion potential</div>
<div>11
</div></div><div><div>Job family (Series)</div>
<ul><li>0511 Auditing
</li></ul></div><div><div>Supervisory status</div>
<div>No</div>
</div><div><div>Security clearance</div>
<div>Sensitive Compartmented Information</div>
</div><div><div>Drug test</div>
<div>No</div>
</div><div></div><div><div>Announcement number</div>
<div>req719</div>
</div><div><div>Control number</div>
<div>861873800</div></div></div></div>

OIG IT Auditor

MetLife

<div><div><div><div><div><div>Location(s)
</div><div><ul><li>Posting Location: Cary, North Carolina</li></ul><br>
</div></div></div></div></div><div><div><div><div><div>City/Cities
</div><div>Cary
</div></div><div><div>Region/States
</div><div>North Carolina
</div></div><div><div>Country
</div><div>United States
</div></div><div><div>Working Schedule
</div><div>Full-Time
</div></div><div><div>Work Arrangement
</div><div>Hybrid
</div></div><div><div>Travel Required
</div><div>10%
</div></div><div><div>Relocation Assistance Available
</div><div>No
</div></div><div><div>Posted Date
</div><div>18-Mar-2026
</div></div><div><div>Job ID
</div><div>16319
</div></div></div></div></div><div><div><div><h3 class="jobSectionHeader"><b>Description and Requirements
</b></h3></div></div><div><div><div><div><div><b>The Team You Will Join</b></div><div><p>
Internal Audit (IA) is an independent global organization that partners with the business to help ensure that management anticipates, recognizes, and appropriately manages risks. IA provides independent assurance and advice while advocating for strong risk management and internal controls.</p></div><p><br>
</p><div><b>
The Opportunity</b></div><div><p>
The Senior IT Auditor is part of a highly collaborative team and supports audit activities across technology domains including application reviews. cybersecurity, IT risk management, enterprise architecture, infrastructure, and vendor management.</p></div><div><div>
Success in this role requires strong audit execution skills and clear, confident communication, paired with an analytical mindset and comfort working across technology domains (e.g., IT risk, cybersecurity, cloud, applications, infrastructure).</div><div>
</div><div>
The Senior IT Auditor is responsible for executing and documenting IT audit testing (including issue remediation testing) and assessing the soundness, adequacy, and compliance of IT processes, risks, and controls in alignment with MetLife policy and leading practices.</div><div>
</div><div>
You&rsquo;ll collaborate closely with Internal Audit team members, audit stakeholders, and auditees/business management in an environment where every contribution is respected, and every perspective is heard.</div></div><p><b>
How You&rsquo;ll Help Us Build a Confident Future (Key Responsibilities)</b></p><div><div><b>
Lead</b> assigned portions of audit engagements by driving your testing responsibilities forward&mdash;executing walkthroughs, sampling, control testing, and drawing conclusions with professional skepticism.<br>
<b>Create</b> high‑quality audit documentation and deliverables, including well‑supported workpapers that meet Internal Audit quality and professional standards.<br>
<b>Oversee</b> your evidence requests and follow‑ups by organizing, tracking, and validating audit support from auditees to keep work moving efficiently.<br>
<b>Manage</b> timely communication with IA peers and stakeholders&mdash;raising risks, barriers, or scope considerations early and escalating appropriately to keep projects on track.<br>
<b>Develop</b> your expertise across a broad IT audit landscape (e.g., cybersecurity, IT risk management, enterprise architecture, applications, infrastructure, vendor management) to support evolving audit coverage needs.</div></div><p><b>
What You Need to Succeed (Required Qualifications)</b></p><div><div><ul><li><b>
2&ndash;4 years of IT internal or external audit experience</b> to effectively execute testing, document results, and support audit and remediation validation work end‑to‑end. Equivalent experience in IT Governance, Risk and Compliance (GRC) domains such as information security, change management or risk management will be considered towards the expected years of experience.</li><li><b>
IT General Controls (ITGC) knowledge</b> (e.g., security, change management, disaster recovery/backup, infrastructure) to evaluate control design and operating effectiveness in real environments.</li><li><b>
SDLC/Agile, cybersecurity, and cloud understanding</b> to assess risk and controls across modern delivery and hosting models.</li><li><b>
Audit frameworks familiarity</b> (e.g., IIA, COBIT, NIST, SOX, PCI DSS) and the ability to apply them when assessing governance, risk, and control expectations.</li><li><b>
Strong communication skills and an effective work style</b>&mdash;including writing, verbal communication, listening/interviewing, and proactive escalation to resolve barriers.</li><li><b>
A collaborative, growth‑oriented mindset</b> with comfort sharing ideas, building relationships, and delivering high‑quality outcomes with others.</li></ul></div></div><p><b>
What Can Give You an Edge (Additional Skills)</b></p><div><ul><li><div>
Suggested <b>1&ndash;2 years of experience in information security, Application Support or equivalent IT/network management</b> to deepen your effectiveness on specialized technology reviews.</div></li><li><div><b>
Certifications (in progress or willingness to pursue): CISA, CIA, CISM or CISSP</b>, strengthening your audit credibility and technical depth.</div></li><li><div><b>
Financial services industry experience</b>, supporting faster context-building and sharper risk judgment in a regulated environment.</div></li><li><div><b>
An AI and data‑curious, improvement‑minded approach</b>&mdash;using analytics and AI tools and available data to draw stronger control conclusions and focus effort where risk is highest.</div></li></ul></div><div>
</div>
</div></div><div><div><div>Location Expectation: This is a hybrid role<b> requiring a minimum of 3 days per week </b>in office.</div>
</div></div><div><div><div>The expected salary range for this position is $85,000 - $105,000. This role may also be eligible for annual short-term incentive compensation. All incentives and benefits are subject to the applicable plan terms.</div>
</div></div></div></div></div><div><div><div><div><div><b>Benefits We Offer</b><div><br>
Our U.S. benefits address holistic well-being with programs for physical and mental health, financial wellness, and support for families. We offer a comprehensive health plan that includes medical/prescription drug and vision, dental insurance, and no-cost short- and long-term disability. We also provide company-paid life insurance and legal services, a retirement pension funded entirely by MetLife and 401(k) with employer matching, group discounts on voluntary insurance products including auto and home, pet, critical illness, hospital indemnity, and accident insurance, as well as Employee Assistance Program (EAP) and digital mental health programs, parental leave, volunteer time off, tuition assistance and much more!</div>
</div></div><div><div><b>About MetLife</b><div><p><br>
Recognized on Fortune magazine's list of the &quot;World's Most Admired Companies&quot;, Fortune World&rsquo;s 25 Best Workplaces&trade;, as well as the Fortune 100 Best Companies to Work For&reg;, MetLife, through its subsidiaries and affiliates, is one of the world&rsquo;s leading financial services companies; providing insurance, annuities, employee benefits and asset management to individual and institutional customers. With operations in more than 40 markets, we hold leading positions in the United States, Latin America, Asia, Europe, and the Middle East.
</p><p></p><p>Our purpose is simple - to help our colleagues, customers, communities, and the world at large create a more confident future. United by purpose and guided by our core values - Win Together, Do the Right Thing, Deliver Impact Over Activity, and Think Ahead - we&rsquo;re inspired to transform the next century in financial services. At MetLife, it&rsquo;s #AllTogetherPossible. Join us!</p></div><br>
</div></div></div></div></div><div></div><div><div><div><div><div><br>
<i>MetLife is an Equal Opportunity Employer. All employment decisions are made without regards to race, color, national origin, religion, creed, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, age, disability, marital or domestic/civil partnership status, genetic information, citizenship status (although applicants and employees must be legally authorized to work in the United States), uniformed service member or veteran status, or any other characteristic protected by applicable federal, state, or local law (&ldquo;protected characteristics&rdquo;).</i><div></div><div><i><br>
If you need an accommodation due to a disability, please email us at accommodations@metlife.com. This information will be held in confidence and used only to determine an appropriate accommodation for the application process.</i><br>
<br>
<i>MetLife maintains a drug-free workplace.</i></div>
</div></div><div><div>$85,000 - $105,000</div></div></div></div></div></div>

State of Oklahoma

<div><div>Job Posting Title</div>
IS Audit Specialist<div></div><div>
Agency</div>
090 OFFICE OF MANAGEMENT AND ENTERPRISE SERV<div></div><div>
Supervisory Organization</div>
RAC<div></div><div>
Job Posting End Date</div><div>
Refer to the date listed at the top of this posting, if available. Continuous if date is blank.</div><div>
Note: Applications will be accepted until 11:59 PM on the day prior to the posting end date above.</div><div></div><div>
Estimated Appointment End Date (Continuous if Blank)</div><div></div><div>
Full/Part-Time</div>
Full time<div></div><div>
Job Type</div>
Regular<div></div><div>
Compensation</div>
Salary up to: $75,000.00 based on skills and experience.<div></div><div>
Job Description</div><div>
As an Information Systems Security and Compliance Specialist with OMES you will enjoy:</div><div></div><ul><li><div>
Generous leave including 15 days of vacation, 15 days of sick leave and 11 paid holidays annually.</div></li><li><div>
A comprehensive <div>Benefit Package</div> with a generous <div>benefit allowance</div> to offset the cost of insurance premiums for employees and their eligible dependents.</div></li></ul><div></div><div>
Job Details</div><div></div><ul><li><div>
Full-time 40-hour work weeks.</div></li><li><div>
Support the Compliance team.</div></li><li><div>
Salary up to: $75,000.00 based on skills and experience.</div></li></ul><div></div><div>
Responsibilities</div><div></div><ul><li><div><br>
Audit &amp; Compliance Support: Collaborate with state agencies, technical subject matter experts (SMEs), regulatory bodies, external auditors, and penetration testers to support audits and evidence collection. Coordinate internal and external audit responses and manage timelines for corrective action plans (CAPs) and plan-of-action and milestone (POA&amp;M) findings. Assist with third-party security assessments and vendor management related security requirements.</div></li></ul><div></div><ul><li><div>
Security &amp; Risk Management: Develop, evaluate, and maintain system security plans (SSPs) and evaluate IT security and privacy controls. Conduct gap analyses, track security control exceptions, and document compensating controls. Support the process of standardizing and streamlining information security audits and assessments. Make recommendations to leadership for reducing internal and partner risks.</div></li></ul><div></div><ul><li><div>
Remediation and Stakeholder Collaboration: Communicate security audit and assessment findings and recommendations and lead remediation efforts through research, documentation, and collaboration with stakeholders. Consult with stakeholders to ensure data, processes, and technology are designed for compliance and data protection. Develop and maintain standard operating procedures (SOPs) related to compliance reporting, security policies, and regulatory requirements. Provide support to OMES and partners to ensure continuous compliance with internal security policies and external regulations.</div></li></ul><div></div><ul><li><div>
Regulatory Compliance and Continuous Improvement: Analyze, interpret, and communicate regulatory changes (e.g., SSA, FTI, CJIS, HIPAA) to the organization. Serve as a change advocate to ensure compliance with state, federal, and local government requirements. Research the applicability of regulations and identify associated reporting requirements. Stay current on best practices in cybersecurity and regulatory compliance to support risk mitigation and asset protection. Advise OMES departments regarding data retention and destruction requirements as defined in the Oklahoma Department of Libraries and Archives and/or OMES disposition schedule. Helps oversee the approved destruction of agency data as defined in the Oklahoma Department of Libraries and Archives and/or OMES disposition schedules. Assist with processing enhanced background checks and CJIS training.</div></li></ul><div></div><div><br>
Valued Skills and Experience</div><div></div><ul><li><div>
Working knowledge of IT and regulatory frameworks and standards. Examples include: NIST CSF, NIST 800-53, IRS 1075, HIPAA, MARS-E, ARC-AMPE, PCI-DSS.</div></li><li><div>
One or more industry recognized certification (CISSP, CISA, CISM, Security+, CIPM, CIPP/US, etc.).</div></li><li><div>
Five or more years of experience in information systems audit and control, information security, risk management, or privacy background.</div></li></ul><div></div><div><br>
Knowledge/Skills/Abilities:</div><div></div><ul><li><div>
Proficient use of IT service management, ticketing and GRC tools and software.</div></li><li><div>
Risk assessment, vulnerability identification and remediation.</div></li><li><div>
Ability to develop System Security Plans.</div></li><li><div>
Ability to effectively evaluate IT security and privacy controls.</div></li><li><div>
Proficient oral and written communication skills.</div></li><li><div>
Strong analytical and problem-solving skills.</div></li><li><div>
Ability to work independently and as part of a team.</div></li><li><div>
Attention to detail and strong organizational skills.</div></li></ul><div></div><div>
Physical Demands and Work Environment</div><div></div><ul><li><div><br>
This position works in a comfortable office setting with a computer for a large percentage of the workday. The noise level in the work environment is usually mild. Occasional travel may be required.</div></li></ul><div></div><div><br>
Minimum Qualifications</div><div></div><ul><li><div>
Bachelor's degree in cybersecurity, or related area, from an accredited college/university; or</div></li><li><div>
Three or more years of information systems security auditing experience.</div></li></ul><div></div><div>
Equal Opportunity Employment</div><div>
The State of Oklahoma is an equal opportunity employer and does not discriminate on the basis of genetic information, race, religion, color, sex, age, national origin, or disability.</div><div></div><div>
Current active State of Oklahoma employees must apply for open positions internally through the Workday <div>Jobs Hub</div>.</div><div>
If you are needing any extra assistance or have any questions relating to a job you have applied for, please click the link below and find the agency for which you applied for additional information:</div><div></div><div><div>
Agency Contact</div></div></div>

IS Audit Specialist

The Certification International

<p>Hiring: Lead Auditor &ndash; IMS, Information Security &amp; Food Safety</p><p>We are seeking a highly qualified Lead Auditor with strong experience in:</p><p>Integrated Management Systems (IMS)</p><p>(ISO 9001 &ndash; ISO 14001 &ndash; ISO 45001)</p><p>Information Security &amp; Business Continuity</p><p>(ISO 27001 &ndash; ISO 22301)</p><p>Food Safety Management Systems</p><p>(ISO 22000 &ndash; HACCP &ndash; FSSC 22000)</p><p>Responsibilities: Conduct certification and surveillance audits according to international standards</p><p>Prepare audit reports with professional accuracy</p><p>Ensure clients&rsquo; compliance with quality, environmental, occupational health &amp; safety, information security, business continuity, and food safety requirements</p><p>Support continuous improvement initiatives</p><p>Requirements: Certified Lead Auditor for IMS, Information Security, and Food Safety</p><p>Strong knowledge of ISO standards</p><p>Excellent communication &amp; reporting skills</p><p>Ability to travel and handle multiple audits</p><p>Job Type: Part-time</p>

LEAD AUDITOR

Search 10000+ Information systems auditor jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 information systems auditor jobs Near Me

Senior Information Systems Auditor

Senior Auditor - IT

Senior IT Auditor

OIG IT Auditor

Senior IT Auditor

IS Audit Specialist

LEAD AUDITOR