Cybersecurity Auditor

Job Description

We are seeking a Cybersecurity Auditor/Assistant Manager/Manager to support our Cybersecurity Consulting practice. This position assists Consultants in planning and executing information technology audits, client risk assessments, data privacy protection and GRC Advisory engagements for our rapidly expanding client portfolio.

Responsibilities:

Support Seniors and Consultants with onsite assessments, such as IM8+, MAS TRM, Cyber Hygiene notices/circulars, ISO 27001, Maturity Assessment, Data Privacy advisory, Social Engineering exercises and NIST CSF engagements

Manage client relationships and expectations with effective communication

Coordinate day-to-day operations with Seniors, Consultants and clients (i.e. schedule and lead meetings; create agendas; develop document request lists; document walkthrough narratives, control designs and tests of operating effectiveness)

Assist Senior Consultants with the preparation and review of draft reports

Assist with audit quality and assurance procedures

Utilise base knowledge of information security systems, risks and controls

Perform other administrative duties and assist with internal initiatives as assigned

Qualifications:

Bachelor’s degree from an accredited university in IT, accounting, data analytics or a related field

Two to five (2-5) years of experience in information security, IT audit or a related field preferred

Focused experience with ISO 27001/MAS TRM/SOC/IM8/NIST preferred

Ideally, working knowledge and technical experience with Windows OS, Linux, AWS, GCP, Azure, and SQL Server

Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements

Familiarity with tools, such as GSuite, Trello, Slack, Discord

Excellent interpersonal, written and verbal communication skills

Exemplary time-management skills with the ability to juggle multiple projects and priorities

Self-starter with a solution-oriented mindset and the ability to thrive in a fast-paced environment, at times with well-defined goals, but limited formal procedures/structure

Must be a team player, passionate about the BDO mission, and have an innovative mindset

Working toward or already have certifications, such as CISA, CISSP, CISM, CRISC, CDPSE, CIPM, CIPT, CSX-F, PCI QSA, and others related to information security and audit