About the Role
**This is a remote job within the United States**
*** To Apply for this position, please send an introduction and your resume to Allie (aCrawford@ThoriumInfosec.com) ***
Thorium is seeking an experienced Information Security Auditor. Winning candidate(s) will work with a small team of self-starters, collaborators, and innovators, and will possess a deep level of knowledge in properly securing Infrastructure and Networks, Web Applications, and Cloud. They will also possess critical "soft skills" required to present complex solutions and topics in a concise manner to audiences of varied levels of understanding and influence. Candidate must also have great people skills, writing skills, and be able to present very technical information to non-technical customers in a friendly and understandable way.
Job Requirements:
• Plans and executes IT audits designed to provide assessment of internal control processes and operational performance, in accordance with department and professional standards
• Effectively uses data analysis software to facilitate audit scoping and testing
• Lead meetings involving various levels of management to effectively communicate audit status, align on audit issues and recommended corrective actions
• Prepare audit reports, including clearly written, concise audit observations that effectively communicate identified issues and their related corrective actions in both technical and non-technical terms to key stakeholders
• Aware of changes in IT audit practices, regulatory requirements, and IT risk frameworks to understand their impact to auditing and (e.g., NIST CSF, COBIT, ISO2700x)
• You will prepare reports and make presentations to senior level management
• You will interact with various levels of employees to collect and communicate information
Qualifications:
• 5 to 7 years of IT audit or information technology experience with a focus on cybersecurity, IT general controls, and software development practices
• CISA, CISSP and/or CISM certification
• Strong risk management experience, including performing audits and assessments, designing controls, managing enterprise control frameworks, and prioritizing risks
• Willingness to dive deep into your own audits combined with experience collaborating on a team
• Excellent written and verbal communication skills
• A fast learner who can quickly absorb the nuances and behaviors systems architecture
• Strong analytical skills
• Proven history of analyzing data and situations to identify meaningful observations
• Broad technical and information security background
• Analytical and computer skills, including proficiency with Excel/Word/ PowerPoint , are required
• Ability to travel up to 35% of the time, if needed
Thorium is an equal opportunity employer (EOE) that empowers our people. It is the policy of Sentinel to provide equal employment opportunities to all employees and employment applicants-without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws.
We fearlessly drive change, because without diversity of thought and a commitment to equality for all, there is no moving forward. Reasonable accommodations are available for qualified individuals with disabilities, upon request. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training
Requirements
Job Requirements:
Plans and executes IT audits designed to provide assessment of internal control processes and operational performance, in accordance with department and professional standard
s
Effectively uses data analysis software to facilitate audit scoping and testing
Lead meetings involving various levels of management to effectively communicate audit status, align on audit issues and recommended corrective actions
Prepare audit reports, including clearly written, concise audit observations that effectively communicate identified issues and their related corrective actions in both technical and non-technical terms to key stakeholders
Aware of changes in IT audit practices, regulatory requirements, and IT risk frameworks to understand their impact to auditing and (e.g., NIST CSF, COBIT, ISO2700x)
You will prepare reports and make presentations to senior level management
You will interact with various levels of employees to collect and communicate information
Qualifications:
5 to 7 years of IT audit or information technology experience with a focus on cybersecurity, IT general controls, and software development practices
CISA, CISSP and/or CISM certification
Strong risk management experience, including performing audits and assessments, designing controls, managing enterprise control frameworks, and prioritizing risks
Willingness to dive deep into your own audits combined with experience collaborating on a team
Excellent written and verbal communication skills
A fast learner who can quickly absorb the nuances and behaviors systems architecture
• Strong analytical skills
Proven history of analyzing data and situations to identify meaningful observations
• Broad technical and information security background
Analytical and computer skills, including proficiency with Excel/Word/ PowerPoint , are required
Ability to travel up to 35% of the time, if needed
About the Company
Thorium Information Security - providing a tailored strategy to address the many cybersecurity challenges faced by customers in today’s ever-changing business and industry landscape.
Thorium provides industry-leading Information Security audits in the form of penetration testing, risk assessments, and other critical 3rd party assessments. We take pride in producing the most thorough and personable reports on the market to ensure our customers receive the information and guidance they need to protect their customers, infrastructure, and company.