Audit Liason

My3Tech; Harrison (Potter County); Hybrid; USD 80,000 - 110,000; Full time

Job summary

My3Tech is seeking an IT Audit Liaison to support the GRC program within the Enterprise security office. You will coordinate internal and external audits, review evidence, and help strengthen cybersecurity and regulatory posture.

The role involves evaluating controls against NIST CSF, NIST 800-53, ISO 27001, and related standards, preparing audit responses, and developing dashboards to track remediation progress across the organization.

Qualifications

• Experience applying IT audit standards and controls.
• Ability to assess compliance with laws, policies, and standards.
• Strong reporting and stakeholder communication skills.

Responsibilities

• Coordinates internal and external IT audits with regulators and oversight bodies.
• Reviews documentation and evidence to determine compliance with laws and policies.
• Evaluates information security controls against established frameworks (NIST CSF, 800-53, ISO 27001).
• Identifies deficiencies, documents findings, and supports remediation actions.
• Assists stakeholders in preparing audit responses and gathering evidence.
• Tracks findings, validates remediation, and reports risk to management.
• Develops automated workflows for audit management and evidence collection.
• Creates dashboards and reports on audit trends and remediation progress.

Skills

IT auditing principles

Cybersecurity governance

Risk management

Internal controls

Regulatory compliance

Education

CISA/CRISC/CISM or equivalent certifications

Tools

NIST CSF

NIST 800-53

ISO 27001

Job description

Job: Audit Liaison

Location: Hybrid - 3 days in the office/2 days remote at Forum Building | 607 South Drive | Harrisburg, PA 17120

Position Summary:

Under the direction of the IT Governance, Risk and Compliance Manager, this position serves as an IT Audit Liaison within the Enterprise security office, supporting the client's Governance, Risk, and Compliance (GRC) Department. The GRC function provides governance, risk evaluation, and compliance oversight to support informed decision-making and the responsible adoption of technology.

The IT Audit Liaison provides technical audit and compliance support for the organization's Governance, Risk, and Compliance (GRC) program. The employee participates in internal and external audit activities, evaluates the effectiveness of information technology controls, identifies compliance gaps, and supports remediation efforts to strengthen the organization's cybersecurity and regulatory compliance posture.

Description of Major Duties:

• Coordinates and supports information technology audits conducted by internal and external oversight organizations, including GAAP/Single Audit, the Auditor General, Attorney General, Bureau of Audits, and other regulatory entities.
• Reviews documentation and technical evidence to determine compliance with applicable laws, regulations, policies, and security standards.
• Evaluates information security and technology controls against established frameworks, including NIST Cybersecurity Framework (CSF), NIST Special Publication 800-53, ISO 27001, and security policies.
• Identifies control deficiencies, documents findings, and recommends corrective actions to reduce organizational risk.
• Assists business and technical stakeholders in preparing audit responses and collecting supporting evidence.
• Tracks audit findings, validates corrective actions and reports remediation status and residual risk to management.
• Supports development and maintenance of automated workstreams for audit management, compliance tracking, and evidence collection.
• Develops dashboards, metrics and executive reports regarding audit trends, compliance posture and remediation progress.
• Performs risk-based assessments to prioritize audit activities and evaluate control effectiveness.
• Assists in developing audit procedures, compliance documentation, meatrics, and management reports.
• Participates in continuous improvement initiatives related to governance, risk management, and internal controls.
• Performs related work as assigned.

Knowledge, Abilities and Preferred Qualifications

Knowledge of:

• Information technology auditing principles and practices
• Cybersecurity governance and risk management
• Internal controls and compliance concepts
• NIST CSF, NIST 800-53, ISO 27001, and related frameworks
• IT infrastructure, applications, cloud technologies, and security controls

Ability to:

• Analyze technical and audit documentation
• Evaluate compliance with policies and standards
• Prepare clear reports and recommendations
• Communicate effectively with technical and non-technical staff
• Organize multiple audit activities simultaneously

Preferred Qualifications:

• Professional certification such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM) or equivalent
• Experience supporting IT audits, regulatory examinations or compliance assessments

Key Responsibilities (Required)

• Evaluates information security and technology controls against established frameworks, including NIST Cybersecurity Framework (CSF), NIST Special Pu. - Required
• Identifies control deficiencies, documents findings, and recommends corrective actions to reduce organizational risk. - Required
• Assists business and technical stakeholders in preparing audit responses and collecting supporting evidence. - RequiredTracks audit findings, validates corrective actions and reports remediation status and residual risk to management. - Required
• Supports development and maintenance of automated workstreams for audit management, compliance tracking, and evidence collection. - Required
• Develops dashboards, metrics and executive reports regarding audit trends, compliance posture and remediation progress. - Required
• Performs risk-based assessments to prioritize audit activities and evaluate control effectiveness. - Required
• Reviews documentation and technical evidence to determine compliance with applicable laws, regulations, policies, and security standards. - Required
• Cybersecurity governance and risk management. - Highly desired
• NIST CSF, NIST 800-53, ISO 27001, and related frameworks. - Highly desired

---