IT Auditor / Risk & Compliance Consultant

IT Auditor / Risk & Compliance Consultant (Short-Term Contract)

Our client is seeking an experienced IT Auditor / Risk & Compliance Consultant to support a short-term engagement focused on IT maturity assessments, compliance evaluations, and internal audit readiness. This role will help establish internal audit and assessment capabilities that have historically been supported by external consulting firms.
The ideal candidate is hands-on, methodical, and comfortable operating independently while partnering closely with security, IT, and business stakeholders.

Key Responsibilities

• Conduct IT and security maturity assessments across people, process, and technology
• Perform compliance assessments against relevant frameworks and regulatory requirements
• Develop and maintain audit crosswalks mapping controls across frameworks (e.g., policy-to-control, control-to-framework)
• Support internal audit activities, including control testing, evidence review, and gap analysis
• Partner with IT, security, and business teams to validate findings and document remediation recommendations
• Produce clear, executive-ready assessment reports and artifacts
• Help establish repeatable internal processes for future audits and assessments

Environment & Tools

• Microsoft-centric environment (e.g., Defender, Sentinel, identity and security tooling)
• ITSM and governance tooling such as ServiceNow
• Identity and resilience platforms including SailPoint and Semperis
• External audit and consulting firms remain involved; this role complements and coordinates with them

Qualifications

• Demonstrated experience in IT audit, risk, and compliance roles
• Strong understanding of common frameworks (e.g., NIST, ISO, SOC, CIS, SOX, or similar)
• Experience performing maturity assessments, control testing, and audit crosswalks
• Ability to translate technical controls into audit- and business-friendly language
• Comfortable working in a consulting-style, short-term engagement
• Strong documentation and stakeholder communication skills

#SoniTech1