IT Exams Specialist

Wipfli LLP; Minneapolis (MN); On-site; USD 70,000 - 90,000; Full time

Job summary

Wipfli LLP is seeking an IT Auditor for its Minnesota region, located in either St. Paul or Minneapolis. In this staff-level role, you will perform IT general controls reviews, SOC examinations, and technical security assessments for various clients.

The ideal candidate will have a bachelor's degree in Information Security or related discipline, along with 3-5 years of relevant experience. Candidates with CISA or CISSP certifications are preferred. The position offers a collaborative environment and opportunities for professional growth.

Qualifications

• 3-5 years related experience and/or training in information technology.
• CISA and/or CISSP certifications are desired.
• Experience with security testing processes.

Responsibilities

• Perform IT general controls reviews and SOC examinations.
• Conduct control testing and prepare reports.
• Maintain testing work programs.

Skills

Information Security

Communication Skills

Project Coordination

Attention to Detail

Problem Solving

Networking Technologies

Education

Bachelor's degree in Information Security or related discipline

Tools

Nmap

Nessus

Metasploit

Job description

Position Summary

Wipfli is currently seeking an IT Auditor for our Minnesota Region. The position could be located in either our St. Paul or Minneapolis office. The role of the IT Auditor is a staff level role that is a primary resource for performing information technology general controls reviews, Service Organization Controls (SOC) examinations, and other services within the Risk Advisory and Forensics Services (RAFS) group including technical security assessments. The Senior IT Auditor will participate in the delivery of IT examinations, information security risk assessments, SOC examinations, HIPAA compliance reviews, and technical security assessments (perimeter vulnerability assessments, internal vulnerability assessments, penetration testing, etc.) by performing these projects and creating project reports and other deliverable for Wipfli clients.

Job Description

• Performs IT general controls reviews, SOC examinations, and other risk advisory services including technical security assessments. These services will be provided for a variety of clients including financial institutions, health care providers, and IT services organizations.
• Performs control testing, interprets results, and prepares reports.
• Helps maintain testing work programs.

Qualifications

• Bachelor’s degree in Information Security, Information Technology or related discipline, 3-5 years related experience and/or training; or equivalent combination of education and experience in similar role
• A high level of initiative, strong written and verbal communication skills and business acumen oriented around small to middle market companies
• Strong organizational skills in coordinating multiple projects/tasks simultaneously, and meeting deadlines
• Great attention to detail and problem solving skills
• CISA and/or CISSP certifications are desired
• Prior experience as a consultant is desired
• Experience with port scanning, vulnerability assessment and penetration testing tools (e.g., Nmap, Nessus, Metasploit), and manual security testing processes
• Strong knowledge of Windows Server and Linux systems
• Strong knowledge of networking and security technologies including routers, switches, firewalls, IDS, anti-virus, protocol analyzers
• Knowledge of database systems

Additional Information

Women, minorities, veterans and individuals with disabilities are encouraged to apply. All your information will be kept confidential according to EEO guidelines.