IT Security Auditor

Semper Sec LLC; Denver (CO); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Full-time benefits

Certifications encouraged

Job summary

Semper Sec LLC in Denver seeks an experienced IT Auditor to own the internal audit lifecycle for client information security programs. You will plan audits, run fieldwork, test controls, review documentation, and interview stakeholders to gather evidence and report findings.

A bachelor’s degree and 5–8+ years in IT audit or compliance are required, with hands-on ISO 27001 and SOC 2 experience; knowledge of PCI and NIST and professional certifications preferred.

Qualifications

• Bachelor’s degree and 5–8+ years in IT audit or compliance.
• Hands-on ISO 27001 and SOC 2 experience.
• Working knowledge of PCI and NIST.
• Relevant professional certifications.
• Regulated-industry and GRC tooling experience preferred.

Responsibilities

• Plan audits, run fieldwork, and report findings.
• Test controls, review documentation, and interview stakeholders.
• Write audit reports that hold up to external scrutiny.
• Maintain independence from the programs under audit.
• Support training and awareness across the client organization.

Skills

IT audit

Compliance

SOC 2

ISO 27001

NIST

PCI

GRC tooling

Education

Bachelor's degree

Tools

GRC tooling

Job description

Own the internal audit lifecycle for client information security management systems, and lead readiness work across ISO 27001, SOC 2, PCI, and NIST.

• Plan audits, run fieldwork, and report findings.
• Test controls, review documentation, and interview stakeholders.
• Write audit reports that hold up to external scrutiny.
• Maintain independence from the programs under audit.
• Support training and awareness across the client organization.

What we look for.

• A bachelor’s degree and five to eight or more years in IT audit or compliance.
• Hands-on ISO 27001 and SOC 2 experience.
• Working knowledge of PCI and NIST.
• Relevant professional certifications.
• Regulated-industry and GRC tooling experience preferred.

Benefits offered to all Semper Sec full-time employees.

Start with the program, not the framework.

Talk with a senior advisor about the decisions, ownership, and operating capability your organization needs next.

A conversation with a senior practitioner, not a sales gatekeeper.