Junior IT Auditor – Cybersecurity & Compliance

AuditSuisse Assurance; New York (NY); Hybrid; USD 28,000 - 30,000; Full time

Job summary

AuditSuisse Assurance is seeking a Junior IT Auditor in the New York area with a strong IT or cybersecurity foundation. You will evaluate security controls, assist in SOC 2 audits, and grow under experienced auditors in a hybrid model (2 days in-office, 3 remote).

No prior auditing experience required; recent graduates are encouraged to apply. We provide hands-on training, mentorship, and opportunities to pursue certifications (CISA).

Qualifications

• Foundational understanding of IT concepts and cybersecurity basics.
• Strong written and verbal communication skills.
• Attention to detail and organizational skills.
• Ability to learn new technical concepts, tools and processes quickly.
• Comfortable working with documentation, spreadsheets and business apps.

Responsibilities

• Assist in IT security and compliance audits including SOC 2 and other frameworks.
• Review IT controls, policies, procedures and supporting docs.
• Collect and assess audit evidence to determine control effectiveness.
• Perform basic testing of ITGCs such as access, change, and operations.
• Document audit procedures, findings and conclusions per methodology.
• Identify gaps and assist in preparing recommendations.
• Request documentation from clients and clarify evidence.
• Maintain audit workpapers, tracking systems and engagement docs.
• Collaborate with senior auditors to complete engagements efficiently.
• Stay informed about cybersecurity risks and relevant frameworks.

Skills

Strong communication

Foundational IT knowledge

Attention to detail

Fast learner

Time management

Team collaboration

Education

Bachelor's degree in Cybersecurity / IT / CS / Information Systems or related field

Bachelor's in another field plus IT/cybersecurity certification (e.g., CompTIA Security+, Network+)

Job description

Location: New York, New Jersey, Virginia, or Massachusetts

Work Arrangement: Hybrid (2 days in-office, 3 days remote)

Compensation: $20–$22 per hour, with opportunities for increases

Experience Level: Entry-Level / Junior

Location: New York, New Jersey, Virginia, or Massachusetts

Work Arrangement: Hybrid (2 days in-office, 3 days remote)

Compensation: $20–$22 per hour, with opportunities for increases

Experience Level: Entry-Level / Junior

About AuditSuisse

AuditSuisse Assurance is a professional audit and assurance firm focused on helping high-growth technology companies complete SOC 2 audits with clarity, speed, and credibility. We work with startups, SaaS companies, AI companies, fintech businesses, healthcare technology companies, and other fast-growing organizations that need independent assurance to win enterprise customers, satisfy investor requirements, and build trust in the market.

We are looking for a driven Business Development Representative / Sales Development Representative to help generate new opportunities, engage prospective clients, and support our growth as a leading SOC 2 audit firm.

About the Role

We are seeking a motivated, detail-oriented Junior IT Auditor to join our growing cybersecurity and compliance team.

This is an entry-level opportunity for someone looking to build a long-term career in IT auditing, cybersecurity, risk management, and regulatory compliance. You'll work alongside experienced auditors and cybersecurity professionals to evaluate organizations' security controls, assess compliance with industry standards, and support audit engagements.

No prior professional auditing experience is required. We're looking for individuals with a strong educational foundation in IT or cybersecurity, a willingness to learn, and the motivation to grow into more senior roles.

We offer hands-on training, mentorship, and opportunities to pursue professional certifications such as the Certified Information Systems Auditor (CISA) , along with increased compensation and career advancement as you develop your skills and experience.

Key Responsibilities

• Assist in conducting IT security and compliance audits, including SOC 2 and other industry frameworks.
• Review and evaluate IT controls, policies, procedures, and supporting documentation.
• Collect, organize, and assess audit evidence to determine whether controls meet applicable requirements.
• Perform basic testing of IT general controls (ITGCs), including access management, change management, and IT operations.
• Document audit procedures, findings, and conclusions in accordance with established methodologies.
• Identify potential security and compliance gaps and assist in preparing recommendations.
• Communicate with clients to request documentation, clarify evidence, and support audit activities.
• Maintain accurate audit workpapers, tracking systems, and engagement documentation.
• Collaborate with senior auditors and team members to complete engagements efficiently and accurately.
• Stay informed about cybersecurity risks, emerging technologies, and relevant compliance frameworks.
  

Required Qualifications

Candidates must meet one of the following educational requirements:

• Option 1: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a closely related technical field.
• Option 2: Bachelor's degree in another field combined with a recognized IT or cybersecurity certification, such as CompTIA Security+, Network+, or an equivalent certification.

Additional requirements:

• Foundational understanding of IT systems, networking, information security, or cybersecurity concepts.
• Strong written and verbal communication skills.
• Excellent attention to detail and organizational skills.
• Ability to learn new technical concepts, tools, and processes quickly.
• Comfortable working with documentation, spreadsheets, and business applications.
• Ability to manage multiple assignments and meet deadlines in a fast-paced professional services environment.
• Must reside in New York, New Jersey, Virginia, or Massachusetts and be able to meet the required hybrid office schedule.

Previous professional auditing experience is not required. Recent graduates are encouraged to apply.

Preferred Qualifications

• Familiarity with SOC 2, ISO 27001, NIST, or other cybersecurity and compliance frameworks.
• Understanding of cloud platforms, networking, identity and access management, or IT infrastructure.
• Previous internship, coursework, or hands-on experience in cybersecurity, IT support, compliance, or auditing.
• Certifications such as CompTIA Security+, CISA, or equivalent credentials.
• Familiarity with compliance automation platforms such as Vanta or Drata.
  

Career Growth & Professional Development

We believe in developing talented individuals into experienced IT audit and cybersecurity professionals. This position is designed to provide a foundation for a long-term career, with opportunities to take on greater responsibilities and increase your earning potential.

As you develop your skills and experience, you'll have opportunities to:

• Earn your CISA certification: Receive guidance and gain relevant professional experience toward pursuing the Certified Information Systems Auditor (CISA) credential, one of the industry's most recognized IT auditing certifications.
• Increase your compensation: Become eligible for performance-based raises and higher compensation as you develop your skills, earn certifications, and take on additional responsibilities.
• Advance into senior positions: Grow into roles such as IT Auditor, Senior IT Auditor, or other positions within cybersecurity, risk management, and compliance.
• Gain valuable industry experience: Work on real-world engagements across multiple industries, technologies, and regulatory frameworks.
• Learn from experienced professionals: Receive hands-on training, mentorship, and regular feedback to accelerate your professional development.

Our goal is to invest in individuals who want to build a career, not simply fill an entry-level position. We value initiative, continuous learning, and professional growth, and we aim to recognize strong performance with greater responsibilities and compensation over time.

What We’re Looking For

We value candidates who are curious, dependable, organized, and motivated to develop professionally.

Successful team members are comfortable working in a fast-paced professional services environment, managing a high volume of assignments, and balancing efficiency with accuracy.

We’re particularly interested in individuals who demonstrate:

• Strong work ethic: A willingness to work hard, stay productive, and take ownership of assigned responsibilities.
• Attention to detail: The ability to produce accurate, organized, and thorough work without sacrificing efficiency.
• Willingness to learn: Curiosity about technology, cybersecurity, and auditing, along with an openness to feedback and continuous improvement.
• Accountability: Reliability in meeting deadlines, communicating clearly, and following through on commitments.
• Professionalism: The ability to work effectively with colleagues and clients in a consulting environment.
• Career motivation: A genuine interest in building long-term expertise and advancing within IT auditing, cybersecurity, or compliance.
  

Compensation & Benefits

• Starting compensation: 20–22 per hour.
• Compensation growth: Opportunities for performance-based increases as skills, certifications, and responsibilities develop.
• Hybrid work schedule: Two days in-office and three days remote each week.
• Professional development: Opportunities to work toward certifications, including CISA.
• Hands-on training: Practical experience with real-world cybersecurity and compliance audits.
• Mentorship: Guidance and support from experienced auditing and cybersecurity professionals.
• Career advancement: Opportunities to progress into higher-level positions within a growing organization.
• Industry exposure: Experience working with a variety of clients, industries, and compliance frameworks.
  

Location Requirements

This position is open exclusively to candidates residing in New York, New Jersey, Virginia, or Massachusetts .

Candidates must be able to work in-office two days per week at their assigned office location. The remaining three days may be worked remotely.

This is not a fully remote position.

If you're a recent graduate or early-career professional looking to establish yourself in cybersecurity and IT auditing, we encourage you to apply. This is an opportunity to gain valuable experience, pursue recognized industry certifications, and build a career with increasing responsibilities and earning potential.