Cyber Risk Internal Audit Lead

Grant Thornton (US); Edison (NJ); Hybrid; USD 138,000 - 173,000; Full time

Job summary

Grant Thornton is seeking a seasoned Cybersecurity Internal Audit professional to assess and enhance clients' risk posture through audits, control testing, and maturity assessments. You will collaborate with risk and compliance teams, deliver actionable insights, and mentor junior staff.

The role requires 5+ years in cybersecurity or IT risk, certifications (CISA/CISSP), and ability to travel. Hybrid work model with in-person client site presence is expected.

Qualifications

• Bachelor’s degree in cybersecurity/IT/CS or related field.
• Master’s degree in cybersecurity preferred.
• 5+ years in cybersecurity, internal audit, or IT risk.
• CISA, CISSP or equivalent certifications required.
• Experience with consulting firm client service preferred.
• Familiarity with cybersecurity frameworks and standards listed.
• Strong communication and ability to travel as needed.

Responsibilities

• Assist in planning and executing cybersecurity internal audits, risk assessments, and control testing engagements.
• Lead walkthroughs, interviews, and workshops with client stakeholders.
• Perform cybersecurity control testing and program capability assessments.
• Conduct maturity assessments using NIST CSF, CSA CCM, ISO/IEC 27001, COBIT, HITRUST.
• Support regulatory compliance assessments including HIPAA, FedRAMP, GLBA, GDPR, and state data breach laws.
• Document risks and controls; develop risk-based recommendations and client deliverables.
• Develop roadmaps to mitigate cyber risks and enhance overall posture.
• Mentor junior team members and contribute to project management and client engagements.

Skills

Cybersecurity

Internal audit

Regulatory frameworks

CISA

CISSP

Client service

Project management

Cloud security

NIST CSF

ISO 27001

Education

Bachelor’s degree in Cybersecurity/IT/CS

Master’s degree in Cybersecurity-related field

Tools

NIST CSF

NIST 800-53

NIST 800-171

CSA CCM

ISO 27001/27002

HIPAA

FedRAMP

GLBA

COBIT

HITRUST

PCI DSS

Job description

Grant Thornton is seeking a seasoned Cybersecurity Internal Audit professional to assess and enhance clients' risk posture through audits, control testing, and maturity assessments. You will collaborate with risk and compliance teams, deliver actionable insights, and mentor junior staff.

The role requires 5+ years in cybersecurity or IT risk, certifications (CISA/CISSP), and ability to travel. Hybrid work model with in-person client site presence is expected.