IT Auditor 2 at Ampcus Austin, TX

Sunseeker Property Service; Austin (TX); On-site; USD 90,000 - 125,000; Full time

Job summary

Ampcus Inc. is seeking an IT Auditor 2 in Austin, TX to support the Office of Court Administration. The role focuses on evaluating vendor cybersecurity controls, reviewing contracts and SLAs, and reporting findings to executives and legal teams.

Ideal candidates will have hands-on IT auditing experience across modern environments, including cloud platforms, and strong analytical skills to identify risks and recommend remediation actions.

Qualifications

• Auditing controls against NIST, ISO 27001, PCI-DSS, or SOC 2 with regulatory knowledge.
• Ability to evaluate security controls across modern IT environments.
• Experience drafting audit reports and presenting findings to executives.
• Analytical thinking to identify gaps and recommend actions.
• Hands-on experience with third-party/vendor risk audits and due diligence.
• Review of security documentation, procedures and controls for accuracy.
• Experience auditing cloud environments (AWS/Azure/GC) and shared responsibility.
• Familiarity with incident response plans and breach assessments.
• Contract interpretation to ensure SLA and cybersecurity obligations.
• Experience in government or regulated industries preferred.
• Ability to present findings to C-suite or legal stakeholders.
• Relevant certifications (CISA, CISSP, CRISC, or ISO 27001 Lead Auditor).

Responsibilities

• Review vendor contracts, SLAs and cybersecurity requirements for compliance.
• Evaluate design and implementation of vendor cybersecurity controls.
• Collect and analyze evidence such as policies, configurations, logs, and access records.
• Conduct interviews with vendor personnel to assess security practices.
• Perform control testing and sampling to verify safeguards.
• Identify gaps, deficiencies, or non-compliance and assess risks.
• Prepare audit reports with findings and corrective actions.
• Track remediation efforts and validate closure of audit findings.
• Coordinate with internal stakeholders to address vendor risks.

Skills

Cybersecurity frameworks and com p li

Job description

Job-ID31213559Reference25-29834Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: IT Auditor 2

Location: Austin, TX

Job Description

Office of Court Administration requires the services of 1 IT Auditor 2, hereafter referred to as Candidate(s), who meets the general qualifications of IT Auditor 2, Security and the specifications outlined in this document for the Office of Court Administration.

• Review vendor contracts, SLAs, and other IT and cybersecurity contractual requirements to confirm compliance with contractual obligations.
• Evaluate the design and implementation of vendor cybersecurity controls against contractual and industry standards.
• Collect and analyze evidence such as security policies, system configurations, logs, and access records.
• Conduct interviews with vendor personnel to assess security practices and governance.
• Perform control testing and sampling to verify the effectiveness of technical and administrative safeguards.
• Identify gaps, deficiencies, or non-compliance in vendor controls and assess associated risks.
• Prepare audit reports summarizing findings, risks, and recommended corrective actions.
• Track remediation efforts and validate closure of audit findings.
• Coordinate with internal stakeholders to ensure vendor risks are communicated and addressed.

CANDIDATE SKILLS AND QUALIFICATIONS

• 5 Required: Cybersecurity frameworks and compliance: Proven experience auditing controls against NIST, ISO 27001, PCI-DSS, or SOC 2 standards, with working knowledge of current data protection laws, regulatory compliance, and third-party risk management practices.
• 5 Required: Technical IT auditing: Strong ability to evaluate security controls such as network protection, identity access management, endpoint security, and incident response across modern IT environments.
• 5 Required: Communication and reporting: Experienced in drafting audit reports, presenting findings to executive and legal stakeholders, and engaging vendors constructively.
• 5 Required: Analytical and investigative thinking: Demonstrated ability to identify security gaps, assess risk impact, and make sound, evidence-based recommendations.
• 4 Required: Third-party/vendor risk auditing: Hands-on experience conducting cybersecurity audits of external vendors, including due diligence, contract compliance, and risk assessments.
• 3 Required: Policy and documentation review: Skilled at reviewing and validating security documentation, procedures, and control implementation for accuracy and completeness.
• 3 Preferred: Cloud cybersecurity auditing: Experience auditing vendor environments hosted in AWS, Azure, or Google Cloud, including cloud-native controls and shared responsibility models.
• 3 Preferred: Incident response and breach assessment: Familiarity with analyzing vendor incident response plans, reviewing past breaches, and evaluating remediation practices.
• 3 Preferred: Contract interpretation and SLA compliance: Ability to interpret legal and technical language in vendor contracts to ensure proper implementation of SLAs, IT, and cybersecurity obligations.
• 2 Preferred: Government or regulated industry experience: Background in auditing technology vendors serving courts.
• 2 Preferred: Presentation to executives: Experience summarizing technical findings for non-technical audiences, including C-suite executives or legal counsel.
• 1 Preferred: Certifications: At least one relevant certification (CISA, CISSP, CRISC, or ISO 27001 Lead Auditor).

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.