IT Security Auditor

Own the internal audit lifecycle for client information security management systems, and lead readiness work across ISO 27001, SOC 2, PCI, and NIST.

• Plan audits, run fieldwork, and report findings.
• Test controls, review documentation, and interview stakeholders.
• Write audit reports that hold up to external scrutiny.
• Maintain independence from the programs under audit.
• Support training and awareness across the client organization.

What we look for.

• A bachelor’s degree and five to eight or more years in IT audit or compliance.
• Hands-on ISO 27001 and SOC 2 experience.
• Working knowledge of PCI and NIST.
• Relevant professional certifications.
• Regulated-industry and GRC tooling experience preferred.

Benefits offered to all Semper Sec full-time employees.

Start with the program, not the framework.

Talk with a senior advisor about the decisions, ownership, and operating capability your organization needs next.

A conversation with a senior practitioner, not a sales gatekeeper.