IT Audit Liaison | GRC & Cybersecurity Controls

My3Tech; Harrison (Potter County); Hybrid; USD 80,000 - 110,000; Full time

Job summary

My3Tech is seeking an IT Audit Liaison to support the GRC program within the Enterprise security office. You will coordinate internal and external audits, review evidence, and help strengthen cybersecurity and regulatory posture.

The role involves evaluating controls against NIST CSF, NIST 800-53, ISO 27001, and related standards, preparing audit responses, and developing dashboards to track remediation progress across the organization.

Qualifications

• Experience applying IT audit standards and controls.
• Ability to assess compliance with laws, policies, and standards.
• Strong reporting and stakeholder communication skills.

Responsibilities

• Coordinates internal and external IT audits with regulators and oversight bodies.
• Reviews documentation and evidence to determine compliance with laws and policies.
• Evaluates information security controls against established frameworks (NIST CSF, 800-53, ISO 27001).
• Identifies deficiencies, documents findings, and supports remediation actions.
• Assists stakeholders in preparing audit responses and gathering evidence.
• Tracks findings, validates remediation, and reports risk to management.
• Develops automated workflows for audit management and evidence collection.
• Creates dashboards and reports on audit trends and remediation progress.

Skills

IT auditing principles

Cybersecurity governance

Risk management

Internal controls

Regulatory compliance

Education

CISA/CRISC/CISM or equivalent certifications

Tools

NIST CSF

NIST 800-53

ISO 27001

Job description

My3Tech is seeking an IT Audit Liaison to support the GRC program within the Enterprise security office. You will coordinate internal and external audits, review evidence, and help strengthen cybersecurity and regulatory posture.

The role involves evaluating controls against NIST CSF, NIST 800-53, ISO 27001, and related standards, preparing audit responses, and developing dashboards to track remediation progress across the organization.