Principal External IT Audit Lead — Cybersecurity & Controls

Jobtailor; Massachusetts; On-site; USD 120,000 - 170,000; Full time

Job summary

Fidelity invites applications for a cybersecurity risk and IT assurance role in Massachusetts. The candidate will strengthen cybersecurity controls, coordinate with external auditors, and ensure alignment with industry frameworks to maintain an impeccably safe control environment.

Ideal candidates bring extensive experience in IT risk, cybersecurity frameworks, and audit engagements, with a background in Big 4 or Fortune 500 client service.

Qualifications

• Proven knowledge of IT risk and cybersecurity functions and their importance to Fidelity’s mission.
• Extensive knowledge of audited cybersecurity frameworks and standards (SOC 1, SOC 2, SOC 3, PCI-DSS, HITRUST, ISO/IEC 27000).
• Experience managing end-to-end projects with clear progress communication.
• Understanding of NIST Cybersecurity Framework core standards.
• Bachelor’s degree in a technology or computer science subject area, or equivalent experience.
• Minimum 5 years working in IT assurance for a Big 4 or similar audit firm, with experience serving Fortune 500 clients.
• Possession of cybersecurity certifications is a plus.
• Prior experience in a cybersecurity role, IT audit, or IT risk role.

Responsibilities

• Ensure our cybersecurity controls are second to none.
• Play a major role in our engagements with independent third-party audit firms.
• Demonstrate adherence to leading industry frameworks, ensuring our control environment is flawless.
• Showcase success through well-managed external audit engagements resulting in unqualified opinions and certifications of Fidelity’s cyber control environment.

Job description

Fidelity invites applications for a cybersecurity risk and IT assurance role in Massachusetts. The candidate will strengthen cybersecurity controls, coordinate with external auditors, and ensure alignment with industry frameworks to maintain an impeccably safe control environment.

Ideal candidates bring extensive experience in IT risk, cybersecurity frameworks, and audit engagements, with a background in Big 4 or Fortune 500 client service.