Senior IT Security Auditor — ISO 27001/SOC 2 Lead

Semper Sec LLC; Denver (CO); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Full-time benefits

Certifications encouraged

Job summary

Semper Sec LLC in Denver seeks an experienced IT Auditor to own the internal audit lifecycle for client information security programs. You will plan audits, run fieldwork, test controls, review documentation, and interview stakeholders to gather evidence and report findings.

A bachelor’s degree and 5–8+ years in IT audit or compliance are required, with hands-on ISO 27001 and SOC 2 experience; knowledge of PCI and NIST and professional certifications preferred.

Qualifications

• Bachelor’s degree and 5–8+ years in IT audit or compliance.
• Hands-on ISO 27001 and SOC 2 experience.
• Working knowledge of PCI and NIST.
• Relevant professional certifications.
• Regulated-industry and GRC tooling experience preferred.

Responsibilities

• Plan audits, run fieldwork, and report findings.
• Test controls, review documentation, and interview stakeholders.
• Write audit reports that hold up to external scrutiny.
• Maintain independence from the programs under audit.
• Support training and awareness across the client organization.

Skills

IT audit

Compliance

SOC 2

ISO 27001

NIST

PCI

GRC tooling

Education

Bachelor's degree

Tools

GRC tooling

Job description

Semper Sec LLC in Denver seeks an experienced IT Auditor to own the internal audit lifecycle for client information security programs. You will plan audits, run fieldwork, test controls, review documentation, and interview stakeholders to gather evidence and report findings.

A bachelor’s degree and 5–8+ years in IT audit or compliance are required, with hands-on ISO 27001 and SOC 2 experience; knowledge of PCI and NIST and professional certifications preferred.