Senior IT Auditor
Client: State of Texas
Location: Austin, TX
Work Mode: Hybrid (3 Days Onsite / 2 Days Remote)
Experience Required: 15+ Years (Mandatory)
Employment Type: Contract (C2C)
Only Local Texas Candidates Will Be Considered
Must be currently residing in Texas
Valid Texas Driver’s License is mandatory
Key Responsibilities
Plan, execute, and report on IT and cybersecurity audits to assess control effectiveness and compliance
Evaluate cybersecurity controls across:
Identity & Access Management
Network Security
Endpoint Protection
Cloud Security
Data Protection
Conduct risk assessments and control testing aligned with NIST CSF, ISO 27001, CIS Controls, COBIT
Assess compliance with regulatory and contractual requirements (SOX, PCI DSS, HIPAA, GDPR, SOC reports, internal policies)
Review vulnerability management, incident response, disaster recovery, and business continuity processes
Collaborate with GRC teams and business stakeholders to understand systems and compliance requirements
Identify control gaps, root causes, and risk impacts; develop clear audit findings and recommendations
Track and validate remediation plans to ensure timely resolution of audit issues
Support third-party risk assessments, including vendor security reviews and SOC reports
Prepare and present audit results to management, senior leadership, and audit committees
Stay current on evolving regulations and industry best practices
Contribute to continuous improvement of audit methodologies, tools, and automation
Required Skills & Qualifications
15+ years of experience in IT Audit, Cybersecurity Audit, or Information Security
Strong experience planning and executing IT and cybersecurity audits
Expertise evaluating security controls across networks, systems, applications, cloud, and data platforms
Strong knowledge of cybersecurity frameworks and standards
Experience assessing IAM, vulnerability management, incident response, DR, and BCP
Proven ability to identify risks, assess impact, and produce well-documented audit reports
Experience tracking and validating audit remediation efforts
Strong communication skills with the ability to explain complex security concepts
Experience conducting forensic investigations related to cyber incidents
Mandatory Certification
CISSP (Required)
Preferred Certification
PMP
Important Notes
This is a Hybrid role requiring onsite presence in Austin, TX
Only Texas local candidates with a valid TX Driver’s License will be considered
Job responsibilities may evolve based on project or organizational needs