Examine internal IT controls, evaluate the design and operational effectiveness, determine exposure to risk, and develop remediation strategies.
Troubleshoot security and network problems.
Respond to all system and/or network security breaches.
Plan, implement, monitor, and upgrade security measures for the protection of the organization’s data, systems, and networks.
Participate in the change management process.
Test and identify network and system vulnerabilities, and create counteractive strategies to protect the network.
Conduct efficient and effective IT audit procedures.
Communicate complex technical issues in simplified terms to the relevant staff.
Perform regular audit testing and provide recommendations.
Review, evaluate, and test application controls.
Provide recommendations and guidance on identified security and control risks.
Develop a strong understanding of business and system processes.
Must have certification below
ISO 27001:2013 Lead Auditor
Information Security Management System
Certified in Cybersecurity by ISC2
5 years of work experience as an IT Auditor.
Experience with firewalls (functionality and maintenance), Office 365 Security, VSX, and Endpoint Security.
Financial and IT application experience
Expert in Firewalls, VPN, Data Loss Prevention, IDS/IPS, Web-Proxy, and Security Audits.
Clear understanding of IT audit methodologies.