As a Senior Technology Auditor focused on cloud technologies and cybersecurity, you'll play a hands-on role in end-to-end audits across AWS cloud environments, enterprise applications, cybersecurity frameworks, and IT infrastructure. This hybrid position is best suited for an experienced, highly technical audit professional who can go well beyond ITGCs - someone capable of owning the full audit lifecycle, from scoping through reporting, with a strong grasp of modern cloud and IT risk landscapes.
Key Responsibilities:
Independently lead and execute complex technology audits focused on cloud environments (especially AWS), cybersecurity programs, network security, and enterprise applications.
Evaluate cloud infrastructure controls, architecture risks, and configuration management within AWS environments, identifying gaps and control weaknesses.
Conduct assessments of cybersecurity frameworks, including access management, vulnerability management, incident response, and endpoint protection.
Review and assess vendor-provided SOC 1 and SOC 2 reports, evaluating vendor risk and control sufficiency across critical outsourced functions.
Audit the full software development lifecycle (SDLC), DevOps pipelines, and CI/CD environments for secure development practices.
Assess enterprise architecture and systems integrations - including ERP systems, SaaS platforms, and custom applications.
Collaborate with audit leadership and business partners in planning, scoping, fieldwork, and reporting phases with minimal supervision.
Develop risk-based audit programs, execute testing, document results, and communicate findings clearly and effectively.
Identify emerging IT risks and trends, and provide strategic recommendations to strengthen controls.
Maintain up-to-date knowledge of regulatory requirements, industry standards (e.g., NIST, ISO, CIS), and leading cloud security practices.
Work closely with Internal Audit, Risk, and Compliance teams to align technology audit priorities with business risks.
Contribute to the continuous improvement of audit methodologies and tooling - particularly in the cloud and cybersecurity domain.
Ideal Background:
5+ years in IT audit or technology risk, with demonstrated experience in cloud audits (AWS required)
Strong grasp of cybersecurity audit principles beyond basic ITGCs
Familiarity with network architecture, endpoint security, IAM, and data protection controls
Experience auditing enterprise architecture and ERP/SaaS platforms
CISA certification strongly preferred; CISSP or AWS certifications a plus
Prior experience in Big 4 or large-scale professional services/enterprise environments highly valued
Comfortable leading discussions with IT leadership, navigating gray areas, and making risk-based judgments
Experience in financial services, insurance, or regulated industries is preferred, but not required
