Senior IT Auditor (FedRAMP)

TL;DR

Senior IT Auditor (FedRAMP): Executing cybersecurity assessments and compliance audits for cloud service providers with an accent on NIST 800-53 controls and cloud infrastructure. Focus on analyzing system security configurations, validating encryption, and reviewing vulnerability reports across AWS, Azure, and OCI.

Location: Remote (USA Nationwide)

Company

A Top 50 CPA firm and leading provider of cybersecurity assessment, attestation, and compliance services.

What you will do

• Conduct interviews with cloud service provider (CSP) Subject Matter Experts in HR, SecDevOps, SOC/NOC, and Internal Compliance.
• Perform technical walkthroughs of various cloud infrastructure-as-a-service architectures including AWS, Azure, and OCI.
• Review system security configurations against NIST 800-53 security control baselines.
• Analyze vulnerability reports and validate encryption configurations.
• Execute testing procedures, document results, and draft project deliverables.
• Collaborate with project teams to ensure high-quality delivery and manage client expectations.

Requirements

• Must be based in the United States.
• Bachelor's degree in accounting, finance, business management, technology, or equivalent experience.
• Minimum 1 year of professional experience in IT auditing, information security management, or risk consulting.
• Maintain at least one relevant certification (e.g., CISA, CISSP, CPA, AQSA, QSA, or OSCP).
• Proficiency in Microsoft Word, Excel, and PowerPoint.

Culture & Benefits

• Flexible remote work environment.
• Culture based on the core value "People Come First".
• Support for further education and pursuit of industry-accepted certifications.
• Certified Great Place to Work and recognized as a Best Firm to Work For.
• Opportunities for annual travel for training, team meet-ups, and strategy meetings.