Remote IT Risk Auditor & Controls Specialist

Vaco Recruiter Services; Columbus (OH); On-site; USD 60,000 - 110,000; Part time

Benefits offered by this job

Remote ET-hour availability

3–5 month contract

Job summary

Vaco Recruiter Services is seeking aContract IT Auditor / Risk Assessor to relaunch and execute IT risk and controls assessments. This remote role requires ET business-hour availability and offers an initial 3–5 month contract with possible extension.

You will identify control owners, collect evidence, and document results to move approved risks and controls into the GRC platform. Strong IT audit and GRC background with broad technical depth is desired.

Qualifications

• 5+ years in IT audit, technology risk, cybersecurity compliance, GRC, controls assurance, or related field.
• Experience executing IT control assessments from evidence request to documented conclusion.
• Strong understanding of IT general controls and cybersecurity control environments.
• Ability to work remotely and maintain ET business-hour availability.

Responsibilities

• Execute risk and control assessments across the organization’s prioritized IT risk areas.
• Review provided control descriptions and recommended test procedures, then translate them into practical assessment activities.
• Identify and engage the appropriate Control Owner or technical SME.
• Explain the purpose of each control, the risk, and the required evidence.
• Request, collect, organize, and evaluate evidence such as: policies and procedures, system reports, access reviews, change tickets, vulnerability reports, logs, and backup docs.
• Assess whether controls are properly designed and operating effectively.
• Distinguish between complete, incomplete, insufficient, and unsupported evidence.
• Challenge unclear responses professionally and constructively.
• Identify control gaps, exceptions, deficiencies, and potential risks.
• Document testing procedures, evidence reviewed, results, conclusions, and remediation recommendations.
• Follow up with Control Owners to obtain missing evidence and resolve questions.
• Coordinate approval of assessed risks with stakeholders and upload results into the GRC platform.
• Train Control Owners to perform future assessments and maintain controls.

Skills

IT audit

GRC

Control assessments

IT general controls

Stakeholder management

Risk communication

Tools

ServiceNow GRC

Archer

AuditBoard

OneTrust

LogicGate

Job description

Vaco Recruiter Services is seeking aContract IT Auditor / Risk Assessor to relaunch and execute IT risk and controls assessments. This remote role requires ET business-hour availability and offers an initial 3–5 month contract with possible extension.

You will identify control owners, collect evidence, and document results to move approved risks and controls into the GRC platform. Strong IT audit and GRC background with broad technical depth is desired.