Senior IT Auditor & Security Assurance Strategist

HITRUST; United States; On-site; USD 90,000 - 130,000; Full time

Job summary

HITRUST is seeking a Senior Information Security Analyst / IT Auditor to ensure the quality and integrity of certifications for our Assurance Services team. You will audit IT controls, work with assessors, and guide risk-based reviews with minimal supervision.

The role requires 3–7 years of IT audit experience, strong communication, and a solid understanding of security frameworks, AWS, UNIX, and Windows. Occasional travel is expected but minimal.

Qualifications

• 3–7 years of experience performing and reviewing IT audits (infrastructure, IT security, SOC 2, etc.).
• Strong knowledge of security risk management and assessment concepts.
• Experience with UNIX, Windows Server, AWS and networks/infrastructure.
• Understanding of AI security concepts, risks, governance and controls.
• BC/DR concepts and ability to work under minimal supervision in a team.
• Ability to manage multiple assessments and adapt to priorities.
• Detail-oriented with strong analytical skills and project tracking.
• Bachelor’s degree or equivalent work experience.

Responsibilities

• Conduct and review IT audits to ensure product assurance quality.
• Collaborate with assessors and stakeholders to review controls.
• Support governance, risk and control activities across projects.

Skills

IT audits

Security risk mgmt

Analytical mindset

Detail-oriented

Interpersonal proj mgmt

Independence w/ supervision

Prioritize tasks

Strong communication

Public accounting IT audit

Education

Bachelor’s degree or equivalent

Tools

HITRUST CSF familiarity

NIST/ISO/COBIT/ITIL familiarity

Security frameworks

Job description

HITRUST is seeking a Senior Information Security Analyst / IT Auditor to ensure the quality and integrity of certifications for our Assurance Services team. You will audit IT controls, work with assessors, and guide risk-based reviews with minimal supervision.

The role requires 3–7 years of IT audit experience, strong communication, and a solid understanding of security frameworks, AWS, UNIX, and Windows. Occasional travel is expected but minimal.