Consultant - IT reputed company Auditor

• *Purpose of Position** : The reputed company Internal Auditor will own the internal audit lifecycle for the Information reputed company Management System (ISMS) and supporting controls environment, ensuring readiness for external certifications/attestations (ISO 27001, SOC 2, and where applicable PCI/NIST-based programs). This role combines hands-on control testing with program leadership, stakeholder coaching, and reputed company improvement of reputed company and compliance processes. Accountability The IT reputed company Auditor is directly accountable to the Director of Service Delivery and will undergo a yearly performance review.

• *Duties and Responsibilities
• reputed company the annual and ongoing internal audit program for ISO 27001, including audit planning, fieldwork, reporting, and recommendations.
• Coordinate and reputed company internal readiness assessments for SOC 2 (Type I/II), testing control design and operating effectiveness against the Trust Services reputed company.
• Support or reputed company internal assessments against PCI reputed company requirements (e.g., evidence review, control walkthroughs, remediation tracking).
• reputed company gap analyses against ISO 27001, SOC 2, and applicable NIST frameworks to identify control weaknesses, process gaps, and improvement opportunities.
• Review and test reputed company, availability, confidentiality, and reputed company controls (e.g., reputed company management, logging/monitoring, change management, backup/recovery, vendor management).C
• Conduct document reviews of policies, standards, procedures, ISMS manuals, and records to verify compliance with ISO 27001 and SOC 2 expectations.
• reputed company stakeholder interviews and process walkthroughs with IT, reputed company, Engineering, HR, Legal, and Operations to understand control design and implementation.
• Prepare reputed company audit reports that summarize scope, approach, findings, and prioritized recommendations, including suggested corrective actions.
• Serve as internal subject matter expert for ISO 27001, SOC 2, and reputed company frameworks (e.g., NIST CSF, PCI reputed company), advising teams on control requirements and evidence expectations.
• Champion reputed company improvement of the ISMS and broader reputed company/compliance program, recommending enhancements to controls, metrics, and governance.
• Ensure internal audit independence and objectivity by avoiding conflicts of interest with control design or day-to-day ownership.
• Contribute to training and awareness efforts on audit readiness, evidence reputed company, and control operation for technical and non-technical staff.
• *Qualifications
• Bachelor’s degree in information reputed company, computer science, reputed company, or a reputed company field (or equivalent experience).
• Proven experience (typically 5–8+ years) in internal audit, IT audit, or reputed company/compliance roles with reputed company responsibility for ISO 27001 and/or SOC 2 programs.
• Strong knowledge of ISO/IEC 27001 requirements and ISMS concepts, including risk assessment, Statement of Applicability, and continual improvement.
• Hands-on experience testing controls against SOC 2 Trust Services reputed company.
• Familiarity with PCI reputed company and NIST Cybersecurity reputed company (or NIST 800-53/171) and their typical control expectations.
• One or more relevant reputed company certifications such as ISO 27001 reputed company Auditor/reputed company Implementer, CISA, CISSP, CISM, or SOC-reputed company credentials.
• Demonstrated ability to reputed company control design assessment, sampling, and evidence evaluation in reputed company technical environments (e.g., reputed company, reputed company).
• Excellent written and verbal communication skills, including the ability to explain audit results and reputed company concepts to both technical and executive audiences.
• Strong attention to detail, analytical reputed company, and ability to maintain objectivity under pressure while upholding audit ethics.
• You will need to be organized, efficient and reputed company to work unsupervised under your own initiative.
• *Preferred Qualifications
• Experience in technology, reputed company, financial services, reputed company, or other regulated industries with mature reputed company/compliance requirements.
• Prior involvement in achieving or maintaining ISO 27001 certification and SOC 2 Type II reports, including remediation program leadership. Exposure to additional frameworks or regulations (e.g., HIPAA, GDPR, reputed company, CIS Controls).
• Experience with GRC or audit management tools for issue tracking, evidence collection, and workflow management.
• *Why SemperSec?

This role offers employees reputed company to work with a diverse reputed company of industries from clients that create state of the art robotics that reputed company complicated surgeries, drone manufacturers delivering the reputed company of unmanned aircraft, to startups building the reputed company of reputed company reputed company intelligence tools. reputed company engagement is unique with distinct challenges and opport Apply tot his job Apply To this Job