Senior Security Auditor

The Reynolds and Reynolds Company; Houston (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

The Reynolds and Reynolds Company in Houston seeks a Senior Security Auditor to lead complex security audits across cloud, on-prem, and software development environments. You will ensure controls are effective, provide audit expertise, and mentor junior team members.

This role requires deep knowledge of AWS security, IAM, CI/CD, and regulatory standards; you will craft executive reports and drive remediation with cross-functional teams.

Qualifications

• 8+ years of experience in security/IT audit or technical risk roles.

Responsibilities

• Lead and execute end-to-end audits for AWS, on-premises, SDLC, IAM, and key SaaS platforms.
• Develop engagement scopes, audit programs, and translate security frameworks into test procedures.
• Assess controls through walkthroughs, configuration reviews, and log analysis; draft clear, actionable findings and remediation recommendations.
• Guide NIST CSF 2.0 maturity assessments and document gaps.
• Serve as audit liaison during external assessments, preparing evidence and managing requests.
• Mentor mid- and junior auditors in methodologies and standards.
• Track and validate remediation of findings.
• Contribute to team operations, process improvements, and automation efforts.

Skills

Leadership

Audit expertise

Executive communication

Cloud security

Mentoring

Cross-functional collaboration

Education

CISA

CISSP

CCSP

AWS Security Specialty

QSA

Bachelor's in IT or CS

Tools

Okta

AWS IAM

CI/CD tooling - Jenkins

NIST CSF 2.0

Job description

The Senior Security Auditor leads complex and high-risk security audits across our cybersecurity, cloud, and software development environments. As a key technical leader, you ensure our security controls are effective, provide audit expertise, and mentor junior team members—all while balancing independence and cross-department collaboration.

Responsibilities:

• Lead and execute end-to-end audits for AWS, on-premises, SDLC, IAM, and key SaaS platforms.
• Develop engagement scopes, audit programs, and translate security frameworks (NIST CSF 2.0, NIST 800-53, PCI DSS, FTC Safeguards) into test procedures.
• Assess controls through walkthroughs, configuration reviews, and log analysis; draft clear, actionable findings and remediation recommendations.
• Guide NIST CSF 2.0 maturity assessments and document gaps.
• Serve as audit liaison during external assessments, preparing evidence and managing requests.
• Mentor mid- and junior auditors in methodologies and standards.
• Track and validate remediation of findings.
• Contribute to team operations, process improvements, and automation efforts.

Requirements:

• 8+ years of experience in security/IT audit or technical risk roles, leading audits independently
• Knowledge of AWS cloud security and infrastructure-as-code
• Strong understanding of NIST CSF 2.0, NIST 800-53, PCI DSS, and FTC Safeguards, with practical application experience
• Experience auditing SDLC, code reviews, CI/CD, and vulnerability management
• Proficiency with identity providers (e.g., Okta), SSO, and privileged access
• Experience building teams, processes, and programs from scratch
• Excellent written communication and ability to produce executive-level reports
• Proven mentoring and leadership skills
• Certifications (CISA, CISSP, CCSP, AWS Security Specialty, QSA) strongly preferred
• Experience in regulated industries (automotive, industrial, etc.) is a plus
• Able to maintain objectivity and strong working relationships with control owners

Reynolds and Reynolds promotes a healthy lifestyle by providing a non-smoking environment. Reynolds and Reynolds is an equal opportunity employer.