About the Role
As a seasoned security professional, you will play a pivotal role in ensuring the robustness of our internal information security and cybersecurity controls. Your primary responsibility will be to plan, execute, and manage 3rd party audits and regulatory compliance assessments.
The ideal candidate will possess excellent analytical skills, strong communication abilities, and a keen understanding of IT audit methodologies. You should be comfortable working independently, with limited supervision, and have a proven track record of delivering high-quality results under pressure.
Key Responsibilities:
* Timely execution and completion of assigned audit projects, coordinating the timing and scheduling of audit activity to achieve completion of the project audit plan.
* Examine in-scope controls, evaluate the design and operational effectiveness, determine exposure to risk, and develop remediation strategies.
* Work independently in the development of project scope, performing testing procedures, and preparing internal audit reports.
* Conduct efficient and effective audit procedures.
* Respond to security questionnaires submitted by our customers and partners in collaboration with the bid team.
* Draft, review and execute RPF responses submitted by our key vendors.
* Perform regular audit testing and provide recommendations.
* Review, evaluate, and test application controls.
* Provide recommendations and guidance on identified security and control risks.
* Develop a strong understanding of business and system processes.
* Comfortable in working in a virtual environment with limited in-person face-to-face interaction.
Requirements
To succeed in this challenging role, you will need to demonstrate the following skills and qualifications:
* 3+ years of work experience as an Information Security Auditor preferably working in Financial/Payments sector.
* Great awareness of cybersecurity trends. Knowledge of IT general controls and internal control areas is required, as is the comprehension of internal auditing standards, PCI DSS, P2PE and PIN,, NIST, ISO 27001, SOC1 Type2, SOC2 Type1and risk-assessment practices.
* A clear understanding of IT audit methodologies.
* Ability to work under pressure in a fast-paced environment.
* Strong attention to detail with an analytical mind and outstanding problem-solving skills.
* Excellent communication skills, both verbal and written.
* Strong interpersonal skills and ability to develop and maintain relationships with client organizations.
* It is considered a plus to hold or have held one or more of the following general/internal certifications: QSA, PCIP, ISA.
Why Join Us
We are an equal opportunity employer that values diversity and promotes merit-based employment decisions. Our organization offers a dynamic work environment that fosters growth and innovation. We prioritize employee well-being and offer flexible work arrangements to support work-life balance.
Our commitment to diversity and inclusion extends to our hiring practices, where we seek candidates from diverse backgrounds and perspectives. If you are passionate about delivering exceptional service and contributing to our mission, we encourage you to apply for this exciting opportunity.