risk auditor

UnitedHealth Group

<div>Optum is a global organization that delivers care, aided by technology, to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.
The Associate Information Security Risk Auditor (Compliance Management Lifecycle) is an early-career contributor responsible for supporting the assessment and validation of security risk policies and their associated standards across their full lifecycle. This role focuses on evaluating policies and their standards and testing against their requirements to confirm adherence. When evaluating policies and control adequacy they may need to refer to regulatory obligations, and leading frameworks (e.g., NIST CSF, ISO/IEC 27001). The auditor works closely with policy, procedure and control owners, risk teams, and technology stakeholders to confirm remediation adequacy, identify gaps, validate evidence, and recommend improvements. Strong attention to detail, analytical skills, and the ability to communicate findings clearly are essential.
You will enjoy the flexibility to telecommute* from anywhere within the U.S. as you take on some tough challenges.
Primary Responsibilities:<ul><li>
Control testing/ Action Plan Validation<ul><li>
Lead assessments of controls, action plans, processes</li><li>
Validate that evidence accurately measures control effectiveness</li><li>
Maintain audit-ready documentation and assist in tracking metric adherence and reporting accuracy</li></ul></li><li>
Compliance &amp; Evidence Review<ul><li>
Perform periodic reviews of controls and procedures to test for control effectiveness</li><li>
Escalate control effectiveness gap delays in remediation</li><li>
Support alignment verification against frameworks (e.g., NIST CSF, ISO 27001) and obligations (e.g., SOX, SOC 2)</li></ul></li><li>
Stakeholder Support &amp; Reporting<ul><li>
Prepare draft summary assessment results for management review</li><li>
Participate in governance meetings and provide input on control validation status</li><li>
Assist in control design efforts including inputs to governance routines and policy requirements</li></ul></li><li>
Core Responsibilities<ul><li>
Conduct independent control and process validation</li><li>
Support policy refresh reviews</li><li>
Ensure audit documentation and evidence traceability are complete and accurate</li><li>
Collaborate with risk and compliance teams to track remediation progress 
Contribute to process improvement initiatives, including automation opportunities</li></ul></li><li>
Core Competencies<ul><li>
Risk Knowledge: Understanding of risk management and control frameworks and regulatory frameworks (NIST, ISO, SOX)</li><li>
Risk &amp; Compliance Awareness: Ability to assess metric-to-control mapping and evidence adequacy</li><li>
Analytical Skills: Strong attention to detail in reviewing metric data and audit evidence</li><li>
Communication: Ability to prepare clear reports and communicate effectively</li><li>
Tool Familiarity: Experience with GRC platforms and metric reporting tools</li></ul></li></ul>
You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear directions on what it takes to succeed in your role as well as provide development for other roles you may be interested in.
Required Qualifications:<ul><li>
Associate's degree (or higher) in Information Security, Risk Management, Business, or related field</li><li>
3+ years of experience in information security auditing, compliance, or risk management as policy governance and control effectiveness</li><li>
1+ years of experience working collaboratively across teams in a matrixed environment</li><li>
Intermediate level of experience with control design and operation, GRC tools, and evidence collection processes</li></ul>
Preferred Qualifications:<ul><li>
Bachelor's degree in Information Security, Risk Management, Business, or related field</li><li>
Certifications such as CISA, CRISC</li><li>All Telecommuters will be required to adhere to UnitedHealth Group's Telecommuter Policy.</li></ul> 
Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $72,800 to $130,000 annually based on full-time employment. We comply with all minimum wage laws as applicable. 
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. 
Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants. 
At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location, and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups, and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission. 
UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. 
UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment. 
#RPO #GREEN</div>

Information Security Risk Auditor

Security Bank

Position Title: Internal Auditor Position SummaryUnder the direction of the Bank&rsquo;s Audit Committee, the Internal Auditor is responsible for independently evaluating the adequacy and effectiveness of internal controls, risk management practices, and governance processes. This role performs detailed reviews of financial and operational activities to ensure compliance with regulatory requirements, internal policies, and industry standards while promoting operational efficiency and safeguarding bank assets.Key Duties and Responsibilities<ul><li>Perform comprehensive audits of financial, operational, and compliance functions across the bank.</li><li>Conduct general and application control reviews of core banking systems and related technology platforms.</li><li>Execute periodic, risk-based audits of internal procedures, including deposits, lending, BSA/AML compliance, and other critical banking operations.</li><li>Assist in the development and annual update of the bank&rsquo;s audit plan and enterprise risk assessment.</li><li>Evaluate the design and effectiveness of internal controls and recommend improvements where necessary.</li><li>Prepare clear, concise audit reports summarizing findings, risks, and actionable recommendations for management and the Audit Committee.</li><li>Follow up on audit findings to ensure timely and effective remediation.</li><li>Ensure compliance with applicable laws and regulations, including guidance from regulatory agencies (e.g., FDIC, OCC, Federal Reserve, and state regulators).</li><li>Collaborate with external auditors and regulatory examiners as needed.</li><li>Maintain awareness of emerging risks, regulatory changes, and industry best practices.</li><li>Promote a strong culture of internal control, accountability, and ethical standards throughout the organization.</li></ul>Qualifications<ul><li>Bachelor&rsquo;s or Master&rsquo;s degree in Accounting, Finance, Business Administration, or a related field.</li><li>Professional certification such as Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or Certified Information Systems Auditor (CISA) preferred but not required.</li><li>2&ndash;5+ years of experience in internal audit, public accounting, or banking operations (community bank experience preferred).</li><li>Strong understanding of banking regulations, internal controls, and risk management principles.</li><li>Experience with core banking systems and audit software is a plus.</li><li>Excellent analytical, organizational, and problem-solving skills.</li><li>Strong written and verbal communication skills, with the ability to present findings to management and the Audit Committee.</li><li>Ability to work independently and manage multiple priorities effectively.</li></ul>Core Competencies<ul><li>Integrity and ethical judgment</li><li>Attention to detail and accuracy</li><li>Critical thinking and risk awareness</li><li>Confidentiality and professionalism</li><li>Adaptability in a regulatory-driven environment</li></ul>Working Conditions<ul><li>Primarily office-based with occasional travel to branch locations (if applicable).</li><li>Standard business hours, with additional time as needed to meet deadlines or audit schedules.</li><li>Professional certification such as Certified Internal Auditor (CIA), Certified Public Accountant (CPA), or Certified Information Systems Auditor (CISA) preferred but not required.</li><li>2&ndash;5+ years of experience in internal audit, public accounting, or banking operations.</li><li>Strong understanding of banking regulations, internal controls, and risk management principles.</li><li>Experience with core banking systems and audit software is a plus.</li><li>Excellent analytical, organizational, and problem-solving skills.</li><li>Strong written and verbal communication skills, with the ability to present findings to management and the Audit Committee.</li><li>Ability to work independently and manage multiple priorities effectively.</li></ul>Pay: $50,000.00 - $80,000.00 per yearBenefits:<ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Dependent care reimbursement</li><li>Disability insurance</li><li>Employee assistance program</li><li>Flexible spending account</li><li>Health insurance</li><li>Life insurance</li><li>Paid time off</li><li>Vision insurance</li></ul>Work Location: In person

Internal Auditor

Moore JFC Group

We are seeking a detail-oriented and analytical IT Auditor &ndash; GRC to evaluate and improve the effectiveness of IT controls, risk management, and governance processes. The role involves assessing compliance with regulatory requirements, identifying control gaps, and recommending improvements to strengthen the organization&rsquo;s IT risk posture.Key Responsibilities:<ul><li>Conduct IT audits covering systems, applications, infrastructure, and processes.</li><li>Evaluate the design and effectiveness of IT general controls (ITGCs).</li><li>Assess compliance with internal policies, standards, and external regulations.</li><li>Perform risk assessments and contribute to the development of audit plans.</li><li>Identify control weaknesses and provide actionable recommendations.</li><li>Review access controls, change management, and data security practices.</li><li>Collaborate with business and IT teams to ensure remediation of audit findings.</li><li>Prepare audit reports and present findings to stakeholders and management.</li><li>Support governance frameworks and risk management initiatives.</li><li>Monitor emerging IT risks, cybersecurity threats, and regulatory changes.</li></ul><ul><li>Strong understanding of ITGC, risk frameworks, and internal controls.</li><li>Professional certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor are preferred.</li></ul>Key Skills &amp; Competencies:<ul><li>Knowledge of GRC frameworks (e.g., COBIT, ISO 27001, NIST).</li><li>Familiarity with regulatory requirements and standards.</li><li>Strong analytical and problem-solving skills.</li><li>Excellent report writing and communication abilities.</li><li>Ability to work independently and manage multiple priorities.</li><li>Attention to detail with a risk-focused mindset.</li></ul>Preferred Experience:<ul><li>Experience with ERP systems (e.g., SAP, Oracle).</li><li>Exposure to cloud environments and cybersecurity audits.</li><li>Prior experience in financial services, telecom, or large enterprises is an advantage.</li></ul>Key Performance Indicators (KPIs):<ul><li>Timely completion of audit assignments.</li><li>Quality and impact of audit findings and recommendations.</li><li>Effectiveness of risk mitigation and control improvements.</li><li>Stakeholder satisfaction and audit report quality.</li></ul>Job Type: Full-timePay: AED6,000.00 - AED15,000.00 per monthWork Location: In person

IT Auditor - GRC

Stellar Hunters

<div><h4 class="jobSectionHeader">Job Summary</h4>

We are seeking a seasoned Senior Internal IT Auditor to join the Internal Audit team and provide independent, objective assurance over the company&rsquo;s IT controls, risk management, and governance processes. The successful candidate will plan and execute IT audit engagements across applications, infrastructure, cloud, identity and access management, change management, and third-party services. This role will collaborate with IT, Security, Risk, Compliance, and business stakeholders to identify control gaps, recommend practical remediation, and drive improvements that support business objectives and regulatory requirements.
<h4 class="jobSectionHeader">Key Responsibilities</h4>
<h5 class="jobSectionHeader">Audit Planning &amp; Execution</h5>
<ul>
<li>Plan, scope, and execute IT audit engagements using a risk-based approach, including development of audit programs, testing plans, and workpapers.</li>
<li>Perform detailed testing of IT general controls and application controls across cloud and on-premise environments, including change management, configuration management, and backup/recovery.</li>
<li>Evaluate the design and operating effectiveness of controls related to identity and access management, privileged access, segregation of duties, and authentication mechanisms.</li>
</ul>
<h5 class="jobSectionHeader">Risk Assessment &amp; Control Evaluation</h5>
<ul>
<li>Conduct IT risk assessments to identify and prioritize technology risks and control gaps that could impact confidentiality, integrity, and availability of systems and data.</li>
<li>Map IT risks and controls to relevant frameworks and standards (e.g., COBIT, NIST, ISO 27001, SOC 2) and provide pragmatic control recommendations.</li>
<li>Assess third-party and cloud provider controls, review vendor risk management artifacts, and perform outsourced service audits where applicable.</li>
</ul>
<h5 class="jobSectionHeader">Reporting &amp; Remediation</h5>
<ul>
<li>Prepare clear, well-supported audit findings, risk ratings, and actionable remediation recommendations; draft audit reports and present results to management and audit committees.</li>
<li>Work with process and technology owners to develop remediation plans, track remediation progress, and validate corrective actions.</li>
<li>Coordinate with external auditors and regulators as needed to support audits and attestations.</li>
</ul>
<h5 class="jobSectionHeader">Continuous Improvement &amp; Advisory</h5>
<ul>
<li>Provide advisory support on IT control design and implementation to enable operational improvements while maintaining auditor independence.</li>
<li>Identify opportunities to enhance audit methodologies, testing tools, and automation to increase audit efficiency and coverage.</li>
<li>Mentor junior audit staff, review their workpapers and findings, and contribute to team knowledge-sharing and training.</li>
</ul>
<h4 class="jobSectionHeader">Required Qualifications - Skills &amp; Experience</h4>
<ul>
<li>Bachelor&rsquo;s degree in Information Technology, Computer Science, Accounting, Cybersecurity, or a related field, or equivalent practical experience.</li>
<li>5+ years of experience performing IT audits, IT risk assessments, or IT control testing in an internal audit, external audit, or IT risk role.</li>
<li>Strong technical understanding of systems, networks, cloud platforms (e.g., AWS, Azure, GCP), databases, and common enterprise applications.</li>
<li>Experience auditing identity and access management, change management, system development lifecycle, vulnerability management, and patching processes.</li>
<li>Familiarity with audit methodologies, sampling techniques, and documentation standards; ability to produce clear, concise audit workpapers and reports.</li>
<li>Excellent written and verbal communication skills with the ability to engage technical and non-technical stakeholders and influence remediation efforts.</li>
<li>Demonstrated analytical mindset with experience in risk assessment, control evaluation, and executive-level reporting.</li>
<li>Proficiency with audit and productivity tools (e.g., GRC platforms, data analytics tools, Office suite).</li>
</ul>
<h4 class="jobSectionHeader">Preferred Qualifications</h4>
<ul>
<li>Relevant certifications such as CISA, CISSP, CRISC, CISM, or Certified Internal Auditor (CIA) preferred.</li>
<li>Experience supporting Sarbanes-Oxley (SOX) IT testing, SOC 2 examinations, or other regulatory audits.</li>
<li>Background in cloud security, DevOps/SecOps practices, or secure software development lifecycle is a plus.</li>
<li>Experience with audit automation, data analytics (ACL, IDEA, Python, SQL), or continuous auditing tools.</li>
</ul>
<h4 class="jobSectionHeader">Work Environment &amp; Compensation</h4>
<ul>
<li>Full-time position with a hybrid onsite/remote model; occasional travel may be required for fieldwork, audits, or meetings with third parties.</li>
<li>Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li>
<li>Opportunities for professional development, certification support, and career progression within Internal Audit, Risk, and Security functions.</li>
<li>Inclusive, respectful work culture that values diversity, equity, and a healthy work-life balance.</li></ul></div>

Senior Internal IT Auditor

HLS Worldwide Pvt Ltd

Overview: We are looking for a detail-oriented and analytical Internal Auditor to evaluate our company&rsquo;s internal controls, processes, and financial procedures. The ideal candidate will ensure compliance with company policies, identify risks, and recommend improvements to strengthen operational efficiency.Key Responsibilities:<ul><li>Conduct internal audits of financial, operational, and compliance processes.</li><li>Review and evaluate the effectiveness of internal controls, policies, and procedures.</li><li>Identify weaknesses, risks, and areas for process improvement.</li><li>Prepare clear and concise audit reports with findings and actionable recommendations.</li><li>Monitor implementation of corrective actions and follow up on open audit points.</li><li>Ensure compliance with company policies, regulatory requirements, and industry standards.</li><li>Perform risk assessments and contribute to annual audit planning.</li><li>Collaborate with finance, operations, procurement, and other departments for audit activities.</li><li>Verify accuracy of financial records, inventory management, and asset controls.</li><li>Assist management in improving governance, transparency, and process efficiency.</li></ul>Requirements:<ul><li>Bachelor&rsquo;s degree in Accounting, Finance, Business Administration, or related field.</li><li>Professional certification (CIA, ACCA, CA Inter) is a plus.</li><li>2&ndash;4 years of experience in internal audit or related roles.</li><li>Strong knowledge of auditing principles, internal controls, and risk management.</li><li>Excellent analytical, problem-solving, and report-writing skills.</li><li>High attention to detail, integrity, and confidentiality.</li><li>Proficiency in MS Excel and audit-related software.</li></ul>Benefits:<ul><li>Competitive salary and performance bonuses</li><li>Professional growth and learning opportunities</li><li>Friendly and collaborative work environment</li></ul>Job Type: Full-timeWork Location: In person

LiveRamp

<div>LiveRamp is the data collaboration platform of choice for the world&rsquo;s most innovative companies. A groundbreaking leader in consumer privacy, data ethics, and foundational identity, LiveRamp is setting the new standard for building a connected customer view with unmatched clarity and context while protecting precious brand and consumer trust. LiveRamp offers complete flexibility to collaborate wherever data lives to support the widest range of data collaboration use cases&mdash;within organizations, between brands, and across its premier global network of top-quality partners.
Hundreds of global innovators, from iconic consumer brands and tech giants to banks, retailers, and healthcare leaders turn to LiveRamp to build enduring brand and business value by deepening customer engagement and loyalty, activating new partnerships, and maximizing the value of their first-party data while staying on the forefront of rapidly evolving compliance and privacy requirements.

In this role you will work on a variety of audit engagements that will require your diligence and creativity. The team you will join works across the entire organization and on ever-changing projects. Success is measured through professional, competent and quality completion of audit engagements. We get things done.
You will:<ul><li>
Participate in assurance and advisory internal audit engagements across information technology, security, privacy, and other operational functions.</li><li>
Contribute to audit planning, synthesizing engagement objectives, risks, business processes, and controls to help define audit scope, approach, and timelines.</li><li>
Execute assigned audit fieldwork through participating in interviews and walkthroughs, gathering evidence, analyzing data, and testing control design and effectiveness.</li><li>
Assist in preparation of clear, well‑organized, and concise workpapers in line with Internal Audit methodology and quality standards.</li><li>
Assist in drafting audit observations, root‑cause analysis, and recommendations for inclusion in formal audit reports and presentations.</li><li>
Apply core audit skills to new and evolving business areas, technologies, and products.</li><li>
Support non‑audit and consulting projects, including readiness assessments, process reviews, and subject‑matter specialist engagements related to information technology (IT), security, and privacy.</li><li>
Participate in required training, professional development, and certification efforts (e.g., CIA, CISA, ISO auditor certifications), and share learnings with the team.</li><li>
Partner with your leader on ongoing performance feedback, development planning, and achievement of 6‑, 12‑, and 18‑month goals.</li><li>
Contribute to a collaborative, inclusive, and high‑performing team culture by openly sharing ideas, offering help, and supporting continuous improvement.</li></ul>
Key Responsibilities:
Work on a global Internal Audit team that partners with IT, security, privacy, and business leaders to provide independent assurance and practical insights on LiveRamp&rsquo;s control environment. The team leads and delivers a diverse portfolio of work, including:<ul><li>
Risk‑based audits and advisory projects related to IT, security, privacy, and operational processes supporting LiveRamp&rsquo;s business.</li><li>
Control testing to support compliance initiatives and certifications, including ISO/IEC standards and regulatory assessments.</li><li>
Exploratory assessments and other projects requested by the Board Audit Committee and senior leadership, focused on prior incidents, emerging technologies, regulatory expectations, and new product offerings.</li></ul>
The team emphasizes structured methodologies, high‑quality deliverables, and constructive stakeholder relationships, while encouraging curiosity, knowledge‑sharing, and opportunities for each team member to grow their expertise.
Required Qualifications:<ul><li>
1&ndash;3 years of experience in IT, security, and/or privacy audit in internal audit, external audit, consulting, or a similar assurance role.</li><li>
Bachelor&rsquo;s degree or equivalent in Accounting, IT, Computer Science, Information Systems, or a related field.</li><li>
Foundational understanding of audit concepts, including risk and controls, control design and operating effectiveness, sampling, and evidence documentation.</li><li>
Demonstrated proficiency in core audit skills such as performing walkthroughs, testing controls, documenting work, and drafting observations.</li><li>
Ability to use Google Workspace (documents, spreadsheets, and presentations) and willingness to learn new tools, including data‑driven and automation solutions.</li><li>
Ability to write and communicate clearly and appropriately with technical and non‑technical stakeholders.</li><li>
Ability to quickly understand direction, break down tasks, and execute with attention to detail and a focus on quality.</li><li>
Demonstrated self‑motivation, ownership mindset, and a positive, solutions‑oriented attitude, even when working through complex or ambiguous problems.</li><li>
Ability to manage multiple priorities, organize work effectively, and consistently meet deadlines in a dynamic environment.</li><li>
Strong collaborator who builds positive working relationships across teams and geographies and contributes to an inclusive, respectful work environment.</li><li>
Intent to pursue a relevant audit certification (for example, CIA, CISA) within an agreed timeframe.</li><li>
Intent to pursue a relevant ISO certification (for example, ISO/IEC 27001:2022 Lead Auditor) as your experience grows and responsibilities expand.</li></ul>
Good to Have:<ul><li>
Experience performing control testing related to one or more of the following (or earlier equivalent) standards:<ul><li>
ISO/IEC 27001:2022,Information security management systems</li><li>
ISO/IEC 27017:2015, Code of practice for information security controls based on ISO/IEC 27002 for cloud services</li><li>
ISO/IEC 27018:2025, Guidelines for protection of personally identifiable information (PII) in public clouds acting as PII processors</li><li>
ISO/IEC 27701:2025, Privacy information management systems</li><li>
ISO/IEC 42001:2023, Artificial intelligence &mdash; Management system</li></ul></li><li>
Experience with IT, security, and/or privacy governance (such as policies, standards, risk assessments, or oversight activities).</li><li>
Experience with IT, security, and/or privacy operations (such as access management, logging and monitoring, incident response, change management, or data protection processes).</li><li>
Professional certification such as CISA, or progress toward certifications like CIA, CRISC, CISSP, CIPM, or other ISO auditor certifications.</li><li>
Experience working in or with high‑growth technology, SaaS, or data‑driven organizations.</li></ul>
<h2 class="jobSectionHeader">
Benefits:</h2><ul><li>
Flexible paid time off, paid holidays, options for working from home, and paid parental leave.</li><li>
Comprehensive Benefits Package: LiveRamp offers a comprehensive benefits package designed to help you be your best self in your personal and professional lives. Our benefits package offers medical, dental, vision, accident, life and disability, an employee assistance program, voluntary benefits as well as perks programs for your healthy lifestyle, career growth, and more. Your medical benefits extend to your dependents including parents.
</li></ul><h2 class="jobSectionHeader">More about us:</h2><h2 class="jobSectionHeader">
LiveRamp&rsquo;s mission is to connect data in ways that matter, and doing so starts with our people. We know that inspired teams enlist people from a blend of backgrounds and experiences. And we know that individuals do their best when they not only bring their full selves to work but feel like they truly belong. Connecting LiveRampers to new ideas and one another is one of our guiding principles&mdash;one that informs how we hire, train, and grow our global team across nine countries and four continents. Click here to learn more about Diversity, Inclusion, &amp; Belonging (DIB) at LiveRamp.
</h2>We use automated decision systems (ADS) as part of our recruitment and hiring process. If you require an accommodation or believe that the use of an ADS may create a barrier to your application or participation in the hiring process due to a disability or other protected characteristic, please let us know. We are committed to providing reasonable accommodations and ensuring an equitable hiring experience for all candidates. 
To all recruitment agencies: LiveRamp does not accept agency resumes. Please do not forward resumes to our jobs alias, LiveRamp employees or any other company location. LiveRamp is not responsible for any fees related to unsolicited resumes.</div>

Staff Auditor

Duncan & Ross Consulting

<div>
 
 
 ROLE OVERVIEW
 
 
 
 We are seeking a skilled IT Audit professional (Assistant Manager / Senior Consultant level) to lead and deliver technology and cybersecurity audit engagements. The role involves assessing IT controls, security frameworks, and governance practices across a range of environments, ensuring alignment with regulatory requirements and industry standards.
 
 
 
 KEY RESPONSIBILITIES
 
 
 
 
 Technology Audits
 
 
 <ul>
 <li>
 Perform audits covering cloud environments, including security, governance, and deployment architecture
 </li>
 <li>
 Review system configurations, hardening practices, and infrastructure security across platforms
 </li>
 <li>
 Assess risks related to emerging technologies and recommend mitigation strategies
 </li>
 </ul>
 
 
 Cybersecurity Audits
 
 
 <ul>
 <li>
 Evaluate cybersecurity governance frameworks and organizational security posture
 </li>
 <li>
 Review identity and access management controls (IAM)
 </li>
 <li>
 Assess network security components including firewalls, IDS/IPS, and web application firewalls (WAF)
 </li>
 <li>
 Conduct or review Vulnerability Assessments and Penetration Testing (VAPT)
 </li>
 <li>
 Assess data protection measures, incident response processes, and security operations
 </li>
 </ul>
 
 
 IT Controls Assessment
 
 
 <ul>
 <li>
 Perform reviews of IT General Controls (ITGC) including access management, change management, and IT operations
 </li>
 <li>
 Evaluate application controls to ensure data integrity, accuracy, and reliability
 </li>
 <li>
 IT Service Management (ITSM) Audits
 </li>
 <li>
 Assess IT service management processes aligned with frameworks such as ITIL
 </li>
 <li>
 Review incident, problem, change, and service request management processes
 </li>
 </ul>
 
 
 Compliance &amp; Regulatory Audits
 
 
 <ul>
 <li>
 Conduct compliance assessments against relevant standards and regulations such as:
 </li>
 <li>
 UAE Information Assurance (UAE IA)
 </li>
 <li>
 ISO 27001
 </li>
 <li>
 NIST
 </li>
 <li>
 CIS Controls
 </li>
 <li>
 Identify gaps and provide actionable recommendations for compliance improvement
 </li>
 </ul>
 
 
 QUALIFICATIONS &amp; EXPERIENCE
 
 
 <ul>
 <li>
 Bachelor's degree in Information Technology, Computer Science, or related field
 </li>
 <li>
 6&ndash;8 years of experience in IT Audit, Technology Risk, or Cybersecurity
 </li>
 <li>
 Experience working in consulting firms or large enterprises is preferred
 </li>
 <li>
 Strong understanding of cloud platforms (AWS, Azure, GCP) and security best practices
 </li>
 <li>
 Hands-on experience in ITGC, ITAC, and cybersecurity audits
 </li>
 </ul>
 
 
 Preferred Certifications
 
 
 <ul>
 <li>
 CISA (Certified Information Systems Auditor)
 </li>
 <li>
 CISSP (Certified Information Systems Security Professional)
 </li>
 <li>
 ISO 27001 Lead Auditor / Implementer
 </li>
 <li>
 ITIL Certification
 </li>
 </ul>
 
 
 Key Skills
 
 
 <ul>
 <li>
 Strong knowledge of IT audit methodologies and risk assessment techniques
 </li>
 <li>
 Familiarity with cybersecurity tools and technologies
 </li>
 <li>
 Analytical thinking with strong attention to detail
 </li>
 <li>
 Excellent communication and stakeholder management skills
 </li>
 <li>
 Ability to manage multiple engagements and deliver within timelines
 </li>
 </ul>
 
 
 Key Deliverables
 
 
 <ul>
 <li>
 Audit reports highlighting risks, gaps, and control weaknesses
 </li>
 <li>
 Practical and actionable remediation recommendations
 </li>
 <li>
 Compliance assessment reports aligned with industry standards
 </li>
 <li>
 Stakeholder presentations and audit documentation
 </li>
 </ul>
 
 Vertical
 
 
 Technology
 
</div>

Information Technology Audit Consultant

Search 8115+ Risk auditor jobs near you this April. New roles added regularly across leading industries. Apply today.

8115 risk auditor jobs Near Me

Information Security Risk Auditor

Internal Auditor

IT Auditor - GRC

Senior Internal IT Auditor

Internal Auditor

Staff Auditor

Information Technology Audit Consultant