Principal, External Audit Engagement

Jobtailor; Massachusetts; On-site; USD 120,000 - 170,000; Full time

Job summary

Fidelity invites applications for a cybersecurity risk and IT assurance role in Massachusetts. The candidate will strengthen cybersecurity controls, coordinate with external auditors, and ensure alignment with industry frameworks to maintain an impeccably safe control environment.

Ideal candidates bring extensive experience in IT risk, cybersecurity frameworks, and audit engagements, with a background in Big 4 or Fortune 500 client service.

Qualifications

• Proven knowledge of IT risk and cybersecurity functions and their importance to Fidelity’s mission.
• Extensive knowledge of audited cybersecurity frameworks and standards (SOC 1, SOC 2, SOC 3, PCI-DSS, HITRUST, ISO/IEC 27000).
• Experience managing end-to-end projects with clear progress communication.
• Understanding of NIST Cybersecurity Framework core standards.
• Bachelor’s degree in a technology or computer science subject area, or equivalent experience.
• Minimum 5 years working in IT assurance for a Big 4 or similar audit firm, with experience serving Fortune 500 clients.
• Possession of cybersecurity certifications is a plus.
• Prior experience in a cybersecurity role, IT audit, or IT risk role.

Responsibilities

• Ensure our cybersecurity controls are second to none.
• Play a major role in our engagements with independent third-party audit firms.
• Demonstrate adherence to leading industry frameworks, ensuring our control environment is flawless.
• Showcase success through well-managed external audit engagements resulting in unqualified opinions and certifications of Fidelity’s cyber control environment.

Job description

Responsibilities

• Ensure our cybersecurity controls are second to none
• Play a major role in our engagements with independent third-party audit firms
• Demonstrate adherence to leading industry frameworks, ensuring our control environment is flawless
• Showcase success through well-managed external audit engagements resulting in unqualified opinions and certifications of Fidelity’s cyber control environment

Requirements

• Proven knowledge of IT risk and cybersecurity functions and their importance to Fidelity’s mission
• Extensive knowledge of audited cybersecurity frameworks and standards, including AICPA’s SOC 1, SOC 2, and SOC 3, PCI‑DSS, HITRUST, Swift CSP and ISO/IEC 27000 family
• Experience managing projects end‑to‑end with a clear ability to communicate progress effectively
• Understanding of NIST Cybersecurity Framework core standards
• Bachelor’s degree in a technology or computer science subject area, or equivalent experience, is preferred
• Minimum 5 years working in IT assurance for a Big 4 or similar audit firm, with experience serving Fortune 500 clients
• Possession of cybersecurity certifications is a plus
• Prior experience in a cybersecurity role, IT audit, or IT risk role

Core Competencies

Demonstrates extensive knowledge of IT risk and cybersecurity functions, with proven experience in managing external audit engagements and adherence to industry frameworks. Possesses strong communication skills to effectively convey project progress and ensure compliance with cybersecurity standards.