IT Security & Compliance Auditor (Hybrid)

The ProSource Group, Inc.; Carlsbad (CA); Hybrid; USD 90,000 - 125,000; Full time

Job summary

The ProSource Group, Inc. in Carlsbad, CA is recruiting an IT Security Analyst for a hybrid role. You will help ensure the organization's IT environment aligns with security policies, regulatory requirements, and industry best practices, coordinating with IT management and auditors.

Your work includes monitoring controls, supporting SOX/PCI/NIST/CIS frameworks, conducting audits, maintaining evidence, and facilitating remediation with IT teams to improve the security posture.

Qualifications

• 4+ years of IT security, compliance, and audit experience.
• Understand IT general controls (ITGCs), access management, and security best practices.
• Experience supporting audits (internal, external, or regulatory).
• Ability to interpret regulatory requirements and policy documentation.

Responsibilities

• Prepare NIST/CIS evaluations with IT security and management.
• Monitor compliance with controls and frameworks (SOX, PCI, NIST/CIS, ISO, C-TPAT).
• Act as liaison between Audit and IT departments for clear communication.
• Coordinate cybersecurity tests with external orgs to ensure secure practices.
• Review IT admin activities to ensure policy adherence.
• Conduct formal audits and reviews per IT policies (monthly, quarterly, semi-annual).
• Maintain audit evidence and reporting materials for audits.
• Partner with IT to identify gaps and support remediation.

Skills

IT security

Regulatory compliance

Audit process

Data analysis

Tools

NIST framework

CIS controls

PCI DSS

Job description

The ProSource Group, Inc. in Carlsbad, CA is recruiting an IT Security Analyst for a hybrid role. You will help ensure the organization's IT environment aligns with security policies, regulatory requirements, and industry best practices, coordinating with IT management and auditors.

Your work includes monitoring controls, supporting SOX/PCI/NIST/CIS frameworks, conducting audits, maintaining evidence, and facilitating remediation with IT teams to improve the security posture.