Position: IT Auditor (Ref: 18599)
Location: Harrisburg, PA United States, 17120
Salary: $28.00/hr.
Duration: 10 Months 18 Days - Contract
Openings: 1
Deadline: 08/14/2026
Description:
***Local Candidates
***Hybrid onsite 3 days/week
We are seeking an IT Audit Liaison to support our Enterprise Governance, Risk, and Compliance (GRC) team. In this role, you will provide technical audit and compliance support, evaluate the effectiveness of information technology controls, identify compliance gaps, and support remediation efforts to strengthen the organization's cybersecurity and regulatory posture.
Key Responsibilities
• Audit Coordination: Support and coordinate IT audits conducted by internal and external oversight and regulatory entities.
• Compliance Review: Review documentation and technical evidence to determine compliance with applicable laws, regulations, policies, and security standards.
• Control Evaluation: Evaluate information security and technology controls against established frameworks, including NIST CSF, NIST SP 800-53, ISO 27001, and organizational security policies.
• Deficiency Identification & Remediation: Identify control deficiencies, document findings, recommend corrective actions, track audit findings, and validate remediation progress.
• Stakeholder Support: Assist business and technical teams in preparing audit responses and collecting supporting evidence.
• Reporting & Metrics: Support automated workstreams for audit management, compliance tracking, and evidence collection. Develop dashboards, metrics, and executive reports on compliance trends and residual risk.
• Risk Assessments: Perform risk-based assessments to prioritize audit activities and evaluate control effectiveness.
Qualifications & Preferred Skills
• Framework Knowledge: Deep familiarity with cybersecurity frameworks including NIST CSF, NIST 800-53, and ISO 27001.
• Technical Auditing: Strong understanding of IT infrastructure, cloud technologies, applications, and security controls.
• Analytical Skills: Demonstrated ability to analyze complex technical evidence, evaluate compliance against standards, and prepare clear, actionable reports.
• Communication: Excellent verbal and written communication skills to effectively collaborate across technical and non-technical teams.
• Certifications (Preferred): Professional certifications such as CISA, CRISC, or CISM are strongly preferred.
Working Conditions:
• Position Type: Contract
• Work Model: Hybrid (3 days on-site / 2 days remote)
• Location: Harrisburg, PA
• Schedule: 8 hours/day, 5 days/week
Required / Desired Skills
• Evaluates information security and technology controls against established frameworks, including NIST Cybersecurity Framework (CSF), NIST Required - 3 Years
• Identifies control deficiencies, documents findings, and recommends corrective actions to reduce organizational risk Required - 3 Years
• Assist business and technical stakeholders in preparing audit responses and collecting supporting evidence. Required - 3 Years
• Tracks audit findings, validates corrective actions and reports remediation status and residual risk to management. Required - 3 Years
• Supports development and maintenance of automated workstreams for audit management, compliance tracking, and evidence collection. Required - 3 Years
• Develop dashboards, metrics and executive reports regarding audit trends, compliance posture and remediation progress. Required - 3 Years
• Performs risk-based assessments to prioritize audit activities and evaluate control effectiveness. Required - 3 Years
• Reviews documentation and technical evidence to determine compliance with applicable laws, regulations, policies, and security standards. Required - 3 Years
• Cybersecurity governance and risk management Required - 1 Years
• NIST CSF, NIST 800-53, ISO 27001, and related frameworks Required - 1 Years