Senior Security Auditor Information Technology Houston, TX

The Reynolds and Reynolds Company; Houston (TX); On-site; USD 100,000 - 130,000; Full time

Job summary

The Reynolds and Reynolds Company is looking for a Senior Security Auditor to lead complex security audits across cybersecurity, cloud, and software development environments. This role involves ensuring the effectiveness of security controls while mentoring junior team members.

The ideal candidate will have over 8 years of experience in security/IT audit, knowledge of AWS and NIST frameworks, and excellent communication skills. This is a remote position with opportunities for process improvements.

Qualifications

• Minimum 8 years’ experience in security/IT audit or technical risk roles.
• Deep knowledge of AWS cloud security and infrastructure-as-code.
• Strong understanding of NIST CSF 2.0, NIST 800-53, PCI DSS, and FTC Safeguards.

Responsibilities

• Lead and execute end-to-end audits for AWS, on-premises, and SDLC.
• Develop engagement scopes and audit programs.
• Assess controls through walkthroughs and configuration reviews.

Skills

Security/IT audit experience

Knowledge of AWS cloud security

Understanding of NIST CSF 2.0

Experience with code reviews and CI/CD

Excellent written communication

Mentoring and leadership skills

Certifications (CISA, CISSP, etc.)

Job description

Senior Security Auditor

Leads complex and high-risk security audits across our cybersecurity, cloud, and software development environments. As a key technical leader, you ensure our security controls are effective, provide audit expertise, and mentor junior team members—all while balancing independence and cross-department collaboration.

Responsibilities

• Lead and execute end-to-end audits for AWS, on-premises, SDLC, IAM, and key SaaS platforms.
• Develop engagement scopes, audit programs, and translate security frameworks (NIST CSF 2.0, NIST 800‑53, PCI DSS, FTC Safeguards) into test procedures.
• Assess controls through walkthroughs, configuration reviews, and log analysis; draft clear, actionable findings and remediation recommendations.
• Guide NIST CSF 2.0 maturity assessments and document gaps.
• Serve as audit liaison during external assessments, preparing evidence and managing requests.
• Mentor mid‑ and junior auditors in methodologies and standards.
• Track and validate remediation of findings.
• Contribute to team operations, process improvements, and automation efforts.

#LI-Remote

Requirements

• 8+ years’ experience in security/IT audit or technical risk roles, leading audits independently.
• Deep knowledge of AWS cloud security and infrastructure‑as‑code.
• Strong understanding of NIST CSF 2.0, NIST 800‑53, PCI DSS, and FTC Safeguards, with practical application experience.
• Experience auditing SDLC, code reviews, CI/CD, and vulnerability management.
• Proficiency with identity providers (e.g., Okta), SSO, and privileged access.
• Excellent written communication and ability to produce executive‑level reports.
• Proven mentoring and leadership skills.
• Certifications (CISA, CISSP, CCSP, AWS Security Specialty, QSA) strongly preferred.
• Experience in regulated industries (automotive, industrial, etc.) is a plus.
• Able to maintain objectivity and strong working relationships with control owners.