Entry-Level IT Auditor (Hybrid Remote)

Compensation: Starting at $20/hour to $25/hour

Employment Type: Full-TimeAbout AuditSuisse Assurance

About the Role: We are seeking motivated, detail-oriented IT Auditors to join our growing cybersecurity and compliance team. This is an excellent opportunity for professionals looking to build a long-term career in IT auditing, security compliance, and assurance. You’ll work alongside experienced auditors supporting a variety of technology assurance engagements, including SOC 2, ISO 27001, HIPAA, cybersecurity assessments, internal control reviews, and other IT audit projects. While this is an entry-level position within our audit team, applicants should already possess several years of relevant professional experience and a strong foundation in information security and IT controls. We provide extensive mentorship, training, and clear opportunities for advancement into Senior IT Auditor, Lead Auditor, and Audit Manager roles.

Responsibilities: Assist with IT audits and security assessments for clients across multiple industries. Evaluate IT general controls (ITGCs), cybersecurity controls, and operational processes. Review technical configurations, policies, and supporting evidence. Conduct interviews with client personnel. Prepare audit workpapers and documentation. Assist with risk assessments and control testing. Help clients understand audit findings and remediation recommendations. Participate in SOC 2, ISO 27001, HIPAA, and other compliance engagements. Stay current with emerging cybersecurity threats, technologies, and industry standards.

Minimum Qualifications: At least 3 years of professional experience in one or more of the following:

• IT auditing
• Information security
• Risk management
• ComplianceInternal audit
• Cybersecurity consulting
• Must hold at least one of the following certifications:
• CISACISSPCISMISO/IEC 27001 Lead Auditor
• Strong written and verbal communication skills.
• Excellent attention to detail and organizational skills.
• Ability to work independently while collaborating with a distributed team.
• Comfortable working with clients in a professional services environment.

Preferred Qualifications: Experience with one or more of the following is a plus:

• SOC 2ISO 27001NIST Cybersecurity FrameworkHIPAAPCI DSSMicrosoft 365AWS, Azure, or Google CloudActive Directory / Entra IDVulnerability management
• Security operationsGRC platforms such as Drata, Vanta, Secureframe, or similar
• Work Arrangement
• Hybrid remote position.
• Candidates must be based in New York, New Jersey, Massachusetts, Florida, or California.
• Occasional travel may be required for client meetings or team events.