ASSOCIATE INFORMATION SECURITY AUDITOR

Accountabilities: • Define the controls and requirements to be reviewed in accordance with established documentation frameworks and control implementation strategies. • Evaluate control implementation and effectiveness across information security, privacy, artificial intelligence, and related compliance areas. • Participate in information security audit engagements and serve as a liaison between external auditors and internal teams. • Coordinate with business units to assess alignment with control requirements and provide governance and oversight support. • Create, maintain, organize, and provide control evidence while coordinating with designated control and evidence owners. • Review audit frameworks, artifact requests, and quality assurance requirements to ensure submitted evidence meets applicable criteria and can be reproduced when necessary. • Apply risk-based monitoring approaches to inform risk treatment strategies and assess the effectiveness of implemented controls. • Support day-to-day security operations and help ensure alignment with applicable policies, standards, frameworks, laws, and regulations. • Monitor security incidents, metrics, account reviews, and other indicators, supporting incident response when deviations from expected security baselines occur. • Contribute security and compliance perspectives to new strategies, technologies, and organizational projects, promoting secure-by-design and privacy-by-design practices. • Help ensure program-level compliance with applicable laws, standards, regulatory requirements, and industry guidance. • Perform additional information security, audit, compliance, and governance responsibilities as assigned. Requirements • Bachelor’s degree in Computer Science, Cybersecurity, Information Technology Compliance, or a related field is required; additional relevant experience or an Associate’s degree combined with relevant experience may be considered in lieu of the degree. • At least 1 year of professional experience in IT auditing, security operations, information security, compliance, or a related field. • Experience evaluating information security controls and compliance requirements against frameworks such as ISO 27001, ISO 27701, SOC 2, NIST Cybersecurity Framework, NIST 800-53, or NIST 800-171. • Working knowledge of the CIS Critical Security Controls and MITRE Framework. • Ability to analyze control evidence, identify gaps and risks, communicate findings, and support practical remediation strategies. • Strong attention to detail and the ability to maintain accurate documentation and evidence throughout audit and compliance activities. • Effective written and verbal communication skills, with the ability to collaborate with technical teams, business stakeholders, auditors, and leadership. • Ability to work independently while contributing effectively within a cybersecurity and compliance team. • U.S. citizenship is required for this position. • Experience in a nonprofit environment is a plus. • Experience developing or contributing to information technology policies, standards, and procedures is preferred. • Experience conducting audits, assessments, or compliance oversight activities and communicating control expectations, findings, and cybersecurity best practices is advantageous. • CISA certification is a plus. • Familiarity with COBIT5, FIBF, CJIS, or other cybersecurity control frameworks is beneficial. Benefits • Compensation: $29.28–$46.83 USD per hour, with base pay determined by factors including education, experience, and skills. • Fully remote work environment. • Medical insurance options, including PPO, EPO, and HSA plans, with eligibility beginning on the first day of employment. • Dental and vision insurance. • $500 wellness card for eligible health coverage participants. • 401(k) retirement plan with a 4% company match, vested from the first day of employment. • Flexible Spending Account (FSA) and Dependent Care Account (DCA). • Life insurance coverage. • Bonding leave and paid time off. • Paid holidays and a paid volunteering program. • Bonus eligibility. • Wellness program and employee engagement activities. • Professional development opportunities and tuition reimbursement. • Student loan paydown program. • Employee referral program. • Employee Assistance Program (EAP). • Inclusive, collaborative workplace with opportunities for continuous learning and career development. How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1