Information Security Auditor

About the role

As an Information Security Auditor at Bamboohr, you will play a role in safeguarding our information systems and ensuring compliance with industry standards. This position involves conducting thorough audits of our security protocols, identifying vulnerabilities, and recommending improvements to enhance our security posture. You will collaborate with various teams to implement best practices and ensure that our security measures align with regulatory requirements. Your expertise will be essential in maintaining the trust of our clients and stakeholders.

Key facts

What you'll do

• Conduct comprehensive audits of information security policies and procedures to ensure compliance with relevant regulations and standards.
• Identify security vulnerabilities and risks within the organization's systems and networks, providing actionable recommendations for mitigation.
• Collaborate with IT and development teams to implement security controls and best practices throughout the software development lifecycle.
• Prepare detailed audit reports that outline findings, risks, and recommendations, presenting them to management and stakeholders.
• Monitor and evaluate the effectiveness of security measures and controls, making adjustments as necessary to address emerging threats.
• Stay up-to-date with the latest security trends, threats, and technologies to ensure that Bamboohr remains at the forefront of information security.
• Assist in the development and implementation of security awareness training programs for employees to promote a culture of security within the organization.
• Participate in incident response activities, including investigating security breaches and recommending corrective actions to prevent future occurrences.
• Support the preparation for external audits and assessments, ensuring that all necessary documentation and evidence are readily available.
• Work closely with compliance teams to ensure that all security practices align with legal and regulatory requirements.
• Engage in continuous improvement initiatives to enhance the overall security framework of the organization.
• Provide guidance and mentorship to junior security staff, fostering a collaborative and knowledge-sharing environment.

Requirements

• Bachelor's degree in Information Technology, Cybersecurity, or a related field.
• A minimum of 3 years of experience in information security auditing or a related role.
• Strong understanding of security frameworks such as ISO 27001, NIST, or CIS Controls.
• Proficiency in risk assessment methodologies and tools.
• Experience with security tools and technologies, including firewalls, intrusion detection systems, and vulnerability scanners.
• Excellent analytical and problem-solving skills, with a keen attention to detail.
• Strong communication skills, both verbal and written, with the ability to convey complex security concepts to non-technical stakeholders.
• Relevant certifications such as CISA, CISSP, or CISM are highly desirable.
• Ability to work independently and collaboratively within a team environment.
• Strong organizational skills and the ability to manage multiple projects simultaneously.

Nice to have

• Experience with cloud security and compliance, particularly in AWS or Azure environments.
• Familiarity with data protection regulations such as GDPR or HIPAA.
• Knowledge of penetration testing methodologies and tools.
• Previous experience in a fast-paced startup environment.
• Understanding of software development processes and secure coding practices.

Skills & tools

• Proficient in security auditing tools such as Nessus, Qualys, or similar.
• Familiarity with SIEM solutions and incident response tools.
• Knowledge of programming languages such as Python or JavaScript for automation and scripting tasks.
• Experience with project management tools and methodologies.
• Strong understanding of networking concepts and protocols.

Practical notes

• The specific location for this role is currently unspecified; however, candidates should be open to remote work or relocation as necessary.
• The salary for this position is competitive and will be determined based on the candidate's experience and qualifications.
• Visa sponsorship is available for qualified candidates, making this an excellent opportunity for international applicants.

META

Company: Bamboohr

Title: Information Security Auditor

Listed

location: Unknown

Job type: Full-time