Senior Security Auditor

The Reynolds and Reynolds Company; Dayton (OH); On-site; USD 120,000 - 180,000; Full time

Job summary

Reynolds and Reynolds is seeking a Senior Security Auditor to lead complex audits across cybersecurity, cloud, and software development environments. You will ensure security controls are effective, provide audit expertise, and mentor junior team members while collaborating across departments.

You will guide audits for AWS, on-premises, SDLC, IAM, and key SaaS platforms, translating frameworks into test procedures and delivering executive‑level reports.

Qualifications

• 8+ years of experience in security/IT audit or technical risk roles, leading audits independently.
• Knowledge of AWS cloud security and infrastructure-as-code.
• Strong understanding of NIST CSF 2.0, NIST 800-53, PCI DSS, and FTC Safeguards, with practical application experience.
• Experience auditing SDLC, code reviews, CI/CD, and vulnerability management.
• Proficiency with identity providers (e.g., Okta), SSO, and privileged access.
• Experience building teams, processes, and programs from scratch.
• Excellent written communication and ability to produce executive-level reports.
• Proven mentoring and leadership skills.
• Certifications (CISA, CISSP, CCSP, AWS Security Specialty, QSA) strongly preferred.
• Experience in regulated industries (automotive, industrial, etc.) is a plus.
• Able to maintain objectivity and strong working relationships with control owners.

Responsibilities

• Lead and execute end-to-end audits for AWS, on-premises, SDLC, IAM, and key SaaS platforms.
• Develop engagement scopes, audit programs, and translate security frameworks (NIST CSF 2.0, NIST 800-53, PCI DSS, FTC Safeguards) into test procedures.
• Assess controls through walkthroughs, configuration reviews, and log analysis; draft clear, actionable findings and remediation recommendations.
• Guide NIST CSF 2.0 maturity assessments and document gaps.
• Serve as audit liaison during external assessments, preparing evidence and managing requests.
• Mentor mid- and junior auditors in methodologies and standards.
• Track and validate remediation of findings.
• Contribute to team operations, process improvements, and automation efforts.

Skills

Audit leadership

Security risk management

Regulatory compliance

Executive reporting

Mentoring

Tools

AWS Cloud Security

Okta / SSO

CI/CD pipelines

NIST CSF 2.0 / 800-53

Job description

The Senior Security Auditor leads complex and high-risk security audits across our cybersecurity, cloud, and software development environments. As a key technical leader, you ensure our security controls are effective, provide audit expertise, and mentor junior team members—all while balancing independence and cross-department collaboration.

Responsibilities:

• Lead and execute end-to-end audits for AWS, on-premises, SDLC, IAM, and key SaaS platforms.
• Develop engagement scopes, audit programs, and translate security frameworks (NIST CSF 2.0, NIST 800-53, PCI DSS, FTC Safeguards) into test procedures.
• Assess controls through walkthroughs, configuration reviews, and log analysis; draft clear, actionable findings and remediation recommendations.
• Guide NIST CSF 2.0 maturity assessments and document gaps.
• Serve as audit liaison during external assessments, preparing evidence and managing requests.
• Mentor mid- and junior auditors in methodologies and standards.
• Track and validate remediation of findings.
• Contribute to team operations, process improvements, and automation efforts.

Requirements:

• 8+ years of experience in security/IT audit or technical risk roles, leading audits independently
• Knowledge of AWS cloud security and infrastructure-as-code
• Strong understanding of NIST CSF 2.0, NIST 800-53, PCI DSS, and FTC Safeguards, with practical application experience
• Experience auditing SDLC, code reviews, CI/CD, and vulnerability management
• Proficiency with identity providers (e.g., Okta), SSO, and privileged access
• Experience building teams, processes, and programs from scratch
• Excellent written communication and ability to produce executive-level reports
• Proven mentoring and leadership skills
• Certifications (CISA, CISSP, CCSP, AWS Security Specialty, QSA) strongly preferred
• Experience in regulated industries (automotive, industrial, etc.) is a plus
• Able to maintain objectivity and strong working relationships with control owners

Reynolds and Reynolds promotes a healthy lifestyle by providing a non-smoking environment. Reynolds and Reynolds is an equal opportunity employer.