Senior Practice Manager/IT Auditing

360 Advanced, Inc.; Saint Petersburg (FL); On-site; USD 90,000 - 120,000; Full time

Job summary

A cybersecurity and compliance firm is seeking a Senior IT Auditing Practice Manager to oversee projects and manage client relationships. Responsibilities include ensuring compliance with regulatory standards, leading assessments, and mentoring junior staff. Candidates should possess at least a Bachelor's degree in a related field, with multiple professional certifications and over eight years of experience in cybersecurity compliance. This full-time position in Saint Petersburg, Florida, includes potential travel to client locations.

Qualifications

• 8+ years of cybersecurity compliance experience.
• Minimum of two years professional services experience at the senior level.
• 10+ years supervisory management experience.

Responsibilities

• Manage projects and teams related to cybersecurity assessment services.
• Plan and execute compliance projects based on unique requirements.
• Develop and maintain relationships with clients and team members.

Skills

Cybersecurity compliance

Project management

Client relationship management

Coaching and mentoring

Education

Bachelor's Degree in Management Information Systems, Cybersecurity, Accounting, Finance, or related field

Professional certifications (CISA, CISSP, CISM, CPA, PCI QSA, ISO 27000 LA)

Job description

GENERAL DESCRIPTION

The Senior IT Auditing Practice Manager position is full-time client serving with the expectation that he / she will work overtime as needed to fulfill job and client responsibilities. This position comes along with the expectation that he / she has a minimum of one of the following designations: CISA, CISSP, CISM, CPA, PCI QSA, ISO 27000 LA. The primary duties include planning and performing cybersecurity and compliance assessment services; managing projects and overseeing staff; and participating in all other functions associated with the management of the cybersecurity professional services practice.

DUTIES AND RESPONSIBILITIES

• Manage projects, teams, and clients related to our service offerings (SOC reporting, PCI, HIPAA, ISO 27000, NIST 800-53/171, HITRUST, Vendor Privacy Assurance, GDPR and various other risk-based projects)
• Plan, execute, conclude, and manage various cybersecurity assessment and compliance projects based on the unique requirements and circumstances of the project
• Manage a book of business with multiple concurrent projects, including scheduling and administration. Draft and review written audit reports which accurately describe procedures performed and results of testing and the nature of control weaknesses and potential risk exposure
• Use their knowledge and experience to document and test computer information systems for clients; provide recommendations on improvements to technology systems/infrastructure
• Ensures information systems application/infrastructure/controls are operating as intended
• Perform risk-based integrated reviews of financial, accounting, operational, systems and management controls
• Work on multiple projects in varying stages through completion and issuance of final deliverables
• Develop and maintain strong relationships with clients and team members; implement good client and employee retention practices
• Create and maintain a team environment
• Coach, train, and develop less experienced personnel
• Perform detail review of workpapers, reports, proposal, and other materials, and ensure high quality deliverables
• Complete original work in technical / complex areas when necessary
• Individual must be able to travel to client locations as needed

REQUIRED QUALIFICATIONS

• Bachelor's Degree in Management Information Systems, Cybersecurity, Accounting, Finance, or related field ·
• Minimum of at least one of the following certifications is required: CPA, CISA, CISM, CISSP, ISO 27000 LA, PCI QSA ·
• 8+ years of cybersecurity compliance experience and/or security assessment or architecture design/review ·
• Executive presence with clients, excellent written and technical skills, and the ability to effectively coach/mentor less experienced personnel ·
• Team motivator and team leader with the ability to complete engagements within defined timelines and within budget ·
• Minimum of two years professional services experience at the senior level in a related practice
• 10+ years supervisory / management experience
• 3 to 10 years of IT audit experience and/or security assessment or architecture
• At least one of the following certifications are required: CPA, CISA, CISM, CISSP, ISO 27000 Lead Auditor, PCI QSA
• Working knowledge of application controls and application development life cycles and methodologies
• Demonstrated entrepreneurial abilities, client focus, industry savvy and the ability to work independently or as part of a collaborative team
• Executive presence with clients, excellent written and technical skills and the ability to effectively coach less experienced personnel are a must
• Team motivator and team leader with the ability to pull projects over the finish line
• Minimum of two years professional services experience at the senior or manager level in a related practice
• Minimum of twenty-five professional services projects successfully completed related to our service offerings
• Demonstrated consistency in values, principles, and work ethic
• Strong, demonstrated technical skills necessary for scoping and executing projects

DESIRED QUALIFICATION

• MBA or MS from a reputable full-time or executive program is highly desirable
• Willingness to pursue relevant additional professional certifications (e.g., CPA, CISA, CISM, CISSP, ISO 27000 LA, PCI QSA, HITRUST CCSFP, etc.)
• Working knowledge of multiple cybersecurity frameworks, application controls, and software development life cycle and methodologies
• Demonstrate entrepreneurial abilities, client centric, industry savvy, and the ability to work independently or as part of a collaborative team
• Minimum of twenty-five professional services projects successfully completed related to our service offerings
• Demonstrated consistency in cultural values, principles, and work ethic
• Strong, demonstrated technical skills necessary for scoping and executing projects
• Ability to lift and move up to 15 pounds
• Ability to sit for prolonged periods of time.
• Ability to stand, walk, bend, or reach as necessary for job tasks.
• Ability to use hands/fingers for typing, writing, or handling materials.

COMPANY DESCRIPTION

360 Advanced is a Cybersecurity and Compliance professional services firm that provides customized integrated solutions. Our clients range across industries and extend from small businesses to the Fortune 500. We work with client operations in over 40 states and on five continents globally. We are based in downtown St. Petersburg and are looking for a Senior Associate / IT Auditor to join our team.