Senior Cybersecurity Auditor

Alexander Technology Group; Quincy (MA); On-site; USD 130,000 - 170,000; Full time

Job summary

Alexander Technology Group seeks an Internal Auditor in Quincy, MA to evaluate technology and cybersecurity risks within an international retail organization. Responsibilities include performing risk-based audits, assessing cybersecurity controls, and presenting findings to senior leadership.

The ideal candidate holds a Bachelor's degree in Computer Science or related field and has 3–5+ years of relevant experience, including IT Audit and Cybersecurity. Industry certifications like CISSP or OSCP are required. Enjoy competitive salary and benefits.

Qualifications

• 3–5+ years of experience in IT Audit, Cybersecurity, Consulting, Engineering, or Penetration Testing.
• Industry certifications required (CISSP, OSCP, Azure Security Engineer/SC-500, or similar).
• Hands-on knowledge of cloud, IAM, network security, vulnerability management, and incident response.

Responsibilities

• Perform risk-based audits and assess cybersecurity controls.
• Identify improvement opportunities and present findings to senior leadership.
• Drive enterprise-wide risk management initiatives.

Skills

IT Audit

Cybersecurity

Communication

Project management

Stakeholder management

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related field

Master's degree (preferred)

Tools

Microsoft Azure

NIST framework

ISO 27001

CIS Controls

Job description

Location: Quincy, MA (3 days onsite)

Salary: $130K–$170K

Travel: Up to 10% US travel

Join a global Internal Audit team responsible for evaluating technology, cybersecurity, operational, and financial risks across a large international retail organization. This role partners with business and IT leaders to perform risk‑based audits, assess cybersecurity controls, identify improvement opportunities, and present findings to senior leadership. You'll work on cloud security, identity and access management, infrastructure, vulnerability management, and IT general controls while helping drive enterprise‑wide risk management initiatives.

Required Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field (Master's preferred)
• 3–5+ years of experience in IT Audit, Cybersecurity, Consulting, Engineering, or Penetration Testing
• Industry certifications are required (CISSP, OSCP, Azure Security Engineer/SC-500, or similar)
• Experience auditing or assessing cybersecurity frameworks (NIST, ISO 27001, CIS Controls)
• Hands‑on knowledge of Azure cloud, IAM, network security, vulnerability management, incident response, and application/infrastructure security
• Experience leading or participating in complex IT and cybersecurity audits
• Strong communication, critical thinking, project management, and stakeholder management skills
• Fluent in English

Nice to Have

• Retail industry experience
• Experience translating technical findings into business‑focused audit recommendations
• Exposure to data analytics, automation, or machine learning within audit or security functions