Associate Security Auditor, Security Auditor, Security Auditor II, Senior Security Auditor

the overall effectiveness of the system, explaining any security issues and suggesting changes and improvements.

Essential Functions (Duties & Responsibilities):                                                                

Security Auditor I is responsible for all the duties listed under the Associate Security

Auditor level and the following:

• Executing security audits independently that are planned by more senior staff including inspecting and evaluating financial and information systems, management procedures and security controls; may be planning some fewer complex audits independently
• Accurately interprets audit results against defined criteria for less complex audits
• Working with clients to develop appropriate remediation plans
• Supporting senior members in the sale of security auditing services
• Performs other duties as assigned

Auditor and Security Auditor I and the following:

• Planning and executing security increasingly more complex audits independently including inspecting and evaluating financial and information systems, management procedures and security controls
• Assessing the exposures resulting from ineffective or missing control practices
• Working with management to ensure security recommendations comply with

Company procedures

• Supporting team technical development, through service development or research, and contributes to company technical processes overall
• Performs other duties as assigned 

• All duties listed under the Associate Security Auditor level and the following:
• Handling the most complex assignments
• Working as a senior subject matter expert (SME) in their field
• Performing peer reviews on reports
• Leading the technical development of a team, training junior members and assisting on improvements to penetration testing services
• Managing complex security testing projects
• Managing other team members assigned to projects
• Performs other duties as assigned

 Required Education and Other Credentials:

• Bachelor’s Degree in Computer Science, Information Systems, Engineering or related major from an accredited University or equivalent; or
• Certification, formal training, experience or demonstrated competency may be evaluated and considered in lieu of the educational requirements                                                      

 One or more of the following certifications are required:

1. Associate Security Auditor): None
2. Security Auditor: one among ISO 27001 Lead Auditor, PCI Qualified Security Auditor (QSA), Certified Information Security Professional (CISP), Certified Information Security Auditor (CISA) or equivalent
3. Security Auditor II: Two among ISO 27001 Lead Auditor, PCI Qualified Security Auditor (QSA), Certified Information Security Professional (CISP), Certified Information Security Auditor (CISA) or equivalent
4. Senior Security Auditor: Certified in Risk and Information Systems Control (CRISC) plus any mandatory for level II