Senior Information Security Analyst/IT Auditor

HITRUST; United States; On-site; USD 90,000 - 130,000; Full time

Job summary

HITRUST is seeking a Senior Information Security Analyst / IT Auditor to ensure the quality and integrity of certifications for our Assurance Services team. You will audit IT controls, work with assessors, and guide risk-based reviews with minimal supervision.

The role requires 3–7 years of IT audit experience, strong communication, and a solid understanding of security frameworks, AWS, UNIX, and Windows. Occasional travel is expected but minimal.

Qualifications

• 3–7 years of experience performing and reviewing IT audits (infrastructure, IT security, SOC 2, etc.).
• Strong knowledge of security risk management and assessment concepts.
• Experience with UNIX, Windows Server, AWS and networks/infrastructure.
• Understanding of AI security concepts, risks, governance and controls.
• BC/DR concepts and ability to work under minimal supervision in a team.
• Ability to manage multiple assessments and adapt to priorities.
• Detail-oriented with strong analytical skills and project tracking.
• Bachelor’s degree or equivalent work experience.

Responsibilities

• Conduct and review IT audits to ensure product assurance quality.
• Collaborate with assessors and stakeholders to review controls.
• Support governance, risk and control activities across projects.

Skills

IT audits

Security risk mgmt

Analytical mindset

Detail-oriented

Interpersonal proj mgmt

Independence w/ supervision

Prioritize tasks

Strong communication

Public accounting IT audit

Education

Bachelor’s degree or equivalent

Tools

HITRUST CSF familiarity

NIST/ISO/COBIT/ITIL familiarity

Security frameworks

Job description

Be part of the future of Information Risk Management in a dynamic and agile environment by joining the HITRUST Assurance Services Team!

The HITRUST Assurance Services team is looking for a Senior Information Security Analyst / IT Auditor. This is a crucial mid-level position working with our core product where you will be responsible for the quality of the certifications – the gatekeeper of the integrity of the product. Additionally, you will rarely be required to travel, making this the perfect job for someone looking to be closer to home.

We are looking for a strong communicator to work with our assessors in a straightforward manner. This job is not about rubber stamping the product but rather ensuring quality. If you enjoy working in a structured environment and you have an analytical mindset, this could be the perfect match. The ideal candidate will have a background in public accounting IT audit and will be able to demonstrate IT security or security assessment experience.

Required Qualifications:

• This position requires 3 to 7 years of experience performing and reviewing IT audits, such as Infrastructure Audits, IT Security Reviews, IT general controls reviews, SOC 2 reports, etc.
• Strong knowledge of security risk management, analysis and assessment concepts and their application
• Strong knowledge of technology platforms (i.e., UNIX, Windows Server, AWS, etc.), networks, and infrastructure
• Good understanding of AI security concepts, risks, governance, and controls
• Good understanding of Business Continuity and Disaster Recovery (BC/DR) concepts
• Must be technically proficient in performing assigned duties at a solid level of independence under minimal supervision while working within a team environment
• Ability to manage multiple assessments simultaneously and adapt to shifting priorities
• Strong analytical skills are required; you must be very detail-oriented with an ability to develop and apply complex concepts
• Interpersonal project management skills; ability to organize and track project tasks
• Bachelor’s degree or equivalent work experience

Preferred Qualifications:

• Public accounting experience in an IT audit role
• Familiarity with the HITRUST CSF or another security framework methodology, such as NIST, ISO, COBIT, ITIL, etc.
• HITRUST certifications, including Certified CSF Practitioner (CCSFP) and Certified HITRUST Quality Professional (CHQP)
• CISA, HCISPP, CISM, CIA, CISSP, or similar certification

About HITRUST

HITRUST is the leader in validated cybersecurity assurance used in third-party risk management and compliance. HITRUST delivers assurance and certification programs for the application and independent validation of security, privacy, and AI controls, harmonized across more than 60 authoritative standards and frameworks. Its threat-adaptive approach combines tiered, selectable assessments (e1, i1, r2, and AI), an ecosystem of over 100 independent assessment firms, centralized quality assurance, standardized reporting, and a powerful SaaS platform to enable consistent, defensible, and scalable assurance. HITRUST delivers the only assurance certification with defensible proof of security, demonstrated by a 99.62% breach-free rate among certified environments in the 2026 Trust Report. For nearly 20 years, HITRUST has defined the standard for trustworthy cybersecurity proof, helping organizations demonstrate measurable cybersecurity resilience across their enterprises and third-party ecosystems.

HITRUST is an equal opportunity employer that is committed to diversity and inclusion in the workplace.

We prohibit discrimination and harassment of any kind based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.