Security Auditor

Responsible for facilitating internal and external audits with internal Data and Control Owners and external Auditing Firms. Audits in scope include ISO 9001, ISO 27001, SOC 1, 2, and 3, and Service Provider Payment Card Industry Data Security Standards (PCI DSS).

Key Role and Responsibilities:

1. Facilitate training for internal employees covering in scope requirements, standards, and controls.

2. Conduct meetings to obtain, review, and analyze information from complex systems to include applications, operating systems, databases, and Network devices data in order to identify risk, exposures, and help identify compensating controls to reduce identified security gaps and risk.

3. Conduct meetings with internal employees and external auditors in order to address security control gaps identified in the information provided for review and evaluation by the external auditor.

4. Prepare weekly and month status reports providing details of outstanding audit items and overall status of each audit.

5. Conduct weekly meetings to review the status of each audit and facilitate working sessions to help address open audit issues.

6. Closely manage multiple audits with varying deliverable dates across numerous stakeholders in order to drive successful completion of each audit engagement and provide visibility of roadblocks that could jeopardize an audit completing on time.

7. Perform research and analysis for various audit topics to gain insights and make recommendations to properly address in scope issues.