Senior IT Auditor: Cybersecurity & Controls Lead

First American Financial Corporation; Santa Ana (CA); On-site; USD 98,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k

PTO/paid leave

Employee stock purchase plan

Job summary

First American Financial Corporation is seeking a seasoned IT Auditor to lead day-to-day planning and fieldwork for technology audits, guiding staff auditors and coordinating with control owners. The role requires strong analytical and communication skills and familiarity with cloud security practices across Azure, AWS, and Google Cloud.

As part of the Internal Audit function, you will document evidence, test controls, and present observations with practical recommendations.

Qualifications

• At least 5 years IT audit or cybersecurity audit experience.
• Experience leading configuration-focused audit testing in CyberArk/PAM, AD, or cloud security.
• Familiar with Azure/AWS/GCP security guidance and Well-Architected frameworks.
• Strong written and verbal communication with minimal day-to-day direction.

Responsibilities

• Lead day-to-day planning and fieldwork for audits.
• Coordinate discussions with control owners and project stakeholders.
• Guide Staff auditors in testing, documenting results, and following up on exceptions.
• Review workpapers for accuracy, traceability, and alignment with test approach.
• Inspect security configurations and assess baselines and requirements.

Skills

IT audit

Leadership

Analytical thinking

Written and verbal comms

Tools

AuditBoard

Power BI

ServiceNow

Jira

SailPoint

Job description

First American Financial Corporation is seeking a seasoned IT Auditor to lead day-to-day planning and fieldwork for technology audits, guiding staff auditors and coordinating with control owners. The role requires strong analytical and communication skills and familiarity with cloud security practices across Azure, AWS, and Google Cloud.

As part of the Internal Audit function, you will document evidence, test controls, and present observations with practical recommendations.