IT & Cybersec auditor

Company Description SecureITLab is a remote-first cybersecurity and data privacy consulting company that has been operating since 2008. The organization supports clients of all sizes, from small and midsize businesses to large enterprises, across diverse industries and regions, including the U.S. and Australia. SecureITLab’s expertise covers compliance, certification readiness, infrastructure protection, and ongoing security management. The team focuses on strengthening clients’ cybersecurity posture and governance with practical, scalable solutions that align with real-world operational needs. Professionals joining SecureITLab can expect to work in a distributed, collaborative environment focused on high-impact security outcomes.
Role OverviewWe are seeking an experienced IT & Cybersecurity Auditor to support IT and cybersecurity audit engagements. The consultant will assess IT infrastructure, cybersecurity controls, IT General Controls (ITGC), technology risks, and governance processes. The role involves evaluating how well security controls work, identifying risks and control gaps, and recommending improvements that strengthen the organization’s cybersecurity posture and its compliance with applicable standards and regulations.Key ResponsibilitiesPlan and carry out IT and cybersecurity audit engagements using established audit methodologies and risk-based audit principles.Evaluate the design and operating effectiveness of IT General Controls (ITGC), including:logical and privileged access managementpassword controlschange managementbackup and recoverylogging and monitoringIT operationsAssess cybersecurity controls across network, endpoint, server, database, cloud, and infrastructure environments.Review Identity and Access Management (IAM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA), and access governance processes.Assess vulnerability and patch management, security monitoring, threat detection, incident response, and Security Operations Center (SOC) capabilities.Review network security architecture, including firewalls, network segmentation, remote access and VPNs, email security, and secure configuration practices.Evaluate cloud security controls across Microsoft Azure, AWS, Microsoft 365, Google Cloud Platform (GCP), and hybrid environments.Perform technology risk assessments to identify control deficiencies, cybersecurity risks, and opportunities for improvement.Assess compliance with internal policies, regulatory requirements, and recognized cybersecurity frameworks and standards.Prepare audit working papers, risk assessments, audit reports, and executive presentations, making sure every finding is clearly documented and supported by evidence.Track remediation actions, confirm they have been implemented, and verify that audit observations are closed.Work closely with IT, Information Security, Risk Management, Internal Audit, and business stakeholders throughout the audit lifecycle.Required Skills & Experience5+ years of experience in IT Audit, Cybersecurity Audit, Information Security, Technology Risk, or Internal Audit.Strong understanding of IT audit methodologies and risk-based auditing.Hands-on experience reviewing IT General Controls (ITGC).Sound knowledge of the following cybersecurity domains:Identity and Access Management (IAM)Privileged Access Management (PAM)Network SecurityEndpoint SecurityServer and Operating System SecurityCloud SecuritySecurity Operations Center (SOC)Vulnerability and Patch ManagementSecurity Monitoring and SIEMIncident ResponseBackup, Recovery, and Disaster RecoveryData Protection and EncryptionExperience auditing on-premises, cloud, and hybrid IT environments.Familiarity with Microsoft Azure, AWS, Microsoft 365, Active Directory, Microsoft Entra ID, VMware, and other enterprise technologies is preferred.Familiarity with cybersecurity and governance frameworks, such as:Local regulatory frameworks, where applicable (e.g., NCA ECC and DCC, SAMA CSF, PDPL)ISO/IEC 27001NIST Cybersecurity Framework (CSF)COBITCIS ControlsPCI DSS, where applicableQualificationsBachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field.Relevant professional certifications are preferred, such as CISA, CISSP, CISM, CRISC, ISO/IEC 27001 Lead Auditor, or equivalent.

Skills
AWS, Azure, GCP, Auditing, Risk Management

Work arrangement
Yes