Senior IT Auditor & Risk Assurance Lead - Remote

Relativity; Chicago (IL); Hybrid; USD 178,000 - 266,000; Full time

Job summary

Relativity is seeking a Staff IT Auditor to lead second-line assurance across IT controls. You will advise first-line on operationalizing controls, perform continuous ITGC testing, and maintain the Risk and Control Matrix lifecycle.

The role requires deep domain knowledge in IT governance, risk and compliance and collaboration across stakeholders. You will work across SOX, ISO, and FedRAMP programs, delivering data-driven risk assessments and remediation plans while reporting to C-suite and

Qualifications

• 8+ years in IT audit, risk management or compliance with hands-on ITGC testing.
• Deep knowledge of risk and control frameworks (NIST CSF, ISO, SOC 2, COBIT, COSO).
• Premium certifications such as CISA, CISSP, CGEIT or equivalent.
• Experience designing and monitoring Risk and Control Matrices (RCMs).
• Excellent written and verbal communication with leadership and technical teams.
• Experience with second-line control testing programs and deficiency reporting.
• Familiarity with FedRAMP Moderate/High readiness and audits.

Responsibilities

• Develop, manage, monitor and optimize second-line IT control activities.
• Set information security policies aligned to management’s framework.
• Continuously assess adequacy and effectiveness of controls with gap analyses.
• Own risk register updates and quarterly reporting to executives and the board.
• Lead integrated audits (SOX, ISO, FedRAMP) with cross-functional teams.
• Collaborate with CISO, ERM and management on risk appetite and control standards.
• Provide expert guidance on control requirements and their operationalization.

Skills

IT audit

Risk management

GRC frameworks

SOX

ISO 27001

NIST 800-53

FedRAMP

Control testing

RCMs

Communication skills

Auditor liaison

Tools

GRC software

Automation tools

AI tooling

Job description

Relativity is seeking a Staff IT Auditor to lead second-line assurance across IT controls. You will advise first-line on operationalizing controls, perform continuous ITGC testing, and maintain the Risk and Control Matrix lifecycle.

The role requires deep domain knowledge in IT governance, risk and compliance and collaboration across stakeholders. You will work across SOX, ISO, and FedRAMP programs, delivering data-driven risk assessments and remediation plans while reporting to C-suite and