Cyber Audit Consultant

Minimum qualifications

- Postgraduate degree in Computer Science, Information Security, Cybersecurity, a related field or equivalent practical experience.

- 5 years of experience in an IT audit role in a consulting firm or complex corporate environment.‍

‍

Preferred qualifications

- CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, or other certifications.

- Extensive experience testing controls to determine compliance with any of the following: ISO 27000 series, SOC 2, NIST, FedRAMP, HITRUST, PCI-DSS, etc.

- Experience in root cause analysis, risk assessments, and technical cross-functional projects within non-standard, technical infrastructure.

‍

About the Job

As a Cyber Audit Consultant at ISOSOC, you're central to our mission. You will work closely with cross-functional teams to ensure cyber compliance measures are seamlessly integrated into our clients' operations. As a pivotal member of the client consulting team, you'll collaborate with top-tier organizations, identifying gaps in their cyber compliance and reporting the discrepancies in clear and actionable detail. You'll have the opportunity to leverage your expertise, influencing the way some of the world's leading corporations manage and prioritize cybersecurity.

You thrive in a fast-paced environment, have a keen interest in technology, and possess an innate ability to dissect complex issues while focusing on both the broader perspective and the minute details. Keeping pace with advancements like AI is crucial, as understanding their implications on cyber compliance and leveraging them is essential for our continued leadership in the field.

‍

About ISOSOC‍

ISOSOC is a global leader in cybersecurity compliance consulting. As technology reshapes industries, the necessity for robust cybersecurity measures becomes paramount. For candidates like you, this means becoming part of a team that not only influences but also sets best practices in cybersecurity compliance worldwide. Rooted in values of integrity, dynamic expertise, and unwavering dedication, we pride ourselves on delivering world-class services.

‍

Additional Information 

- People-Centric Approach: At ISOSOC, we recognize that our strength stems from ourteam. We prioritize our colleagues’ well-being and are dedicated to fostering an environment of flexibility and understanding.

- Four-Day Work week: We believe in concentrated, effective work. Our services demand acute focus. When we're engaged, we're fully present, and in return, we want you to enjoy an extended weekend – a time for yourself, family, and pursuits outside of work.

- Embrace Remote Work: Apart from specific client engagements, ISOSOC operates as a remote-first organization. We value the freedom and diversity this brings to our team, allowing you to be based where you thrive. However, the importance of face-to-face connections isn't lost on us; we meet in person for company on-sites at varying locations once or twice a year.

‍

Responsibilities

- Client Engagement: Foster and nurture meaningful relationships with key client stakeholders across various sectors, ensuring their cyber compliance needs are heard, understood, and addressed effectively.

- Audit Program Development: Design, refine, and execute comprehensive audit programs and procedures that align with client-specific requirements, ensuring the seamless alignment of audit objectives with client operational realities.

- Transparent Reporting: Deliver concise yet detailed audit reports to client stakeholders, spotlighting evidence-based assurance, insightful findings, and constructive observations. Consistently conduct diligent follow-ups to ensure prompt and efficient remediation of control gaps or other identified vulnerabilities.

- Collaborative Analysis: Work hand-in-hand with client teams and ISOSOC Leadership. Deep-dive into audit findings to gauge their real-world implications, conclude with clarity, and make actionable, pragmatic recommendations that resonate with both technical and non-technical stakeholders.