InfoSec Compliance & Audit Lead - PCI & Vendor Risk

County of Orange; Santa Ana (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Orange County Information Technology (OCIT) seeks an experienced manager to provide audit coordination, vendor security risk assessment, and PCI compliance management. The Information Security Compliance & Audit Manager serves as the enterprise owner of OCIT's centralized audit coordination services and is the County's primary liaison for IT audits, security assessment, external auditors, vendors, and internal stakeholders.

This position requires strong analytical and communication skills.

Qualifications

• Experience performing IT audits and PCI DSS assessments.
• Familiar with information security frameworks and control practices.
• Ability to coordinate audits across multiple departments and vendors.
• Knowledge of breach response and remediation processes.

Responsibilities

• Serve as the primary audit liaison between OCIT and internal/external stakeholders.
• Lead audit planning, communications, and escalation paths.
• Provide guidance on PCI scope and recurring vulnerability scans.
• Coordinate cross-functional reviews with Security, Server/Desktop/Cloud, Legal, Procurement.
• Present executive-level audit status and lessons learned to drive improvements.

Skills

Audit coordination

PCI DSS

Risk management

Vendor management

Executive reporting

Education

CISA

CISSP

CRISC

PCI ISA

Tools

GRC platform (Optro)

ServiceNow

Microsoft Project

Jira

Job description

Orange County Information Technology (OCIT) seeks an experienced manager to provide audit coordination, vendor security risk assessment, and PCI compliance management. The Information Security Compliance & Audit Manager serves as the enterprise owner of OCIT's centralized audit coordination services and is the County's primary liaison for IT audits, security assessment, external auditors, vendors, and internal stakeholders.

This position requires strong analytical and communication skills.