IT Auditor

About the Role:

Compass IT Compliance is seeking an IT Auditor to join our team! In this role, you will deliver SOC audits, IT audits, and cybersecurity risk assessments for clients across a wide range of industries, gaining exposure to SOC 1, SOC 2, and SOC 3 engagements as well as frameworks including PCI DSS, NIST, ISO 27001, HIPAA, and CMMC.

As an IT Auditor, you will manage engagements from kickoff through report delivery, serve as a trusted point of contact for clients, and help organizations understand and reduce their risk. You will work alongside experienced IT audit and security professionals, with clear opportunities to grow your technical skills and advance within the company.

What You Will Do:

• Perform SOC 1, SOC 2, and SOC 3 audits, including walkthroughs, control testing, and evidence evaluation.
• Conduct cybersecurity risk assessments, IT Audits, and compliance reviews against standards such as PCI DSS, and Laws and frameworks that may include NIST, ISO 27001/27002, HIPAA, GLBA, CJIS, CIS, and CMMC.
• Evaluate the design and operating effectiveness of client controls and test supporting evidence.
• Identify control gaps and security vulnerabilities, and provide clear, practical recommendations.
• Prepare accurate, well-organized SOC reports, assessment reports, and audit documentation.
• Lead client kickoff meetings, walkthroughs, and status check-ins, and answer client questions with confidence.
• Perform Business Impact Analyses and help clients build and update business continuity, disaster recovery, and incident response plans.
• Participate in third-party/vendor assessments and assist with client security policy and procedure development.
• Deliver cybersecurity awareness training to client organizations.
• Support pre-sales conversations and new client onboarding.
• Collaborate with the other teams that include Sales, Risk and Compliance, vCISO, Cyber Guard, Compass Assurance Team, and Government Services across concurrent engagements.
• Share knowledge with junior team members and help improve Compass’s IT audit methodology, templates, and service offerings.

What You Bring:

• Bachelor's degree in information systems, Cybersecurity, Information Technology, Computer Science, Risk Management, or a related field, or equivalent experience.
• 2-5 years of experience in IT auditing, cybersecurity, IT risk management, and compliance.
• Working knowledge of SOC 1, SOC 2, and SOC 3 frameworks, including AICPA standards and Trust Services Criteria.
• Familiarity with major regulatory and security frameworks, including PCI DSS, NIST, CIS, ISO 27001/27002, HIPAA/HITECH, CJIS, GLBA, and FFIEC.
• Solid understanding of IT systems, network architecture, cloud platforms (AWS, Azure, Google Cloud), and cybersecurity best practices.
• Experience with security policies and control documentation, as well as business continuity, disaster recovery, and incident response planning.
• Excellent written and verbal communication skills, with the ability to explain technical topics to technical and executive audiences.
• Strong attention to detail and commitment to clean, accurate deliverables.
• Ability to manage multiple engagements and deadlines with minimal supervision.
• Advanced proficiency in Microsoft 365 (Word, Excel, PowerPoint, and Outlook).
• Willingness to travel regionally to client sites (up to ~30%).

Preferred Qualifications:

• SOC audit experience.
• Experience performing or supporting external IT audits or cybersecurity assessments for clients, regulators, or third parties.
• Active certifications, or active pursuit of certifications, such as CISA, CISM, or CISSP; CRISC, CGEIT, or CMMC CCP are a plus.
• Familiarity with GRC tools.

Why Join Compass:

• Be part of a mission-driven team helping organizations stay secure and compliant.
• Build expertise across a broad range of frameworks, industries, and regulatory requirements.
• Gain direct client-facing experience with a clear path for professional growth and advancement.
• Receive support for continuing professional education and certifications.
• Work in a primarily remote, supportive environment alongside experienced audit and security professionals.
• Competitive compensation.
• Comprehensive medical, dental, and vision coverage.
• Life insurance.
• SIMPLE IRA retirement plan with employer match.
• Unlimited PTO and paid holidays.
• Strong work/life balance.

Pay: $60,000.00 - $110,000.00 per year

Benefits:

• Dental insurance
• Employee assistance program
• Flexible schedule
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Professional development assistance
• Referral program
• Retirement plan
• Tuition reimbursement
• Vision insurance

Work Location: Hybrid remote in North Providence, RI 02904