Audit Liason

#Eng-IT-01

Job Summary

This position, under the direction of the IT Governance, Risk, and Compliance Manager, serves as an IT Audit Liaison within the Enterprise Information Security Office (EISO). It supports the Commonwealth's Governance, Risk, and Compliance (GRC) Department, which provides governance, risk evaluation, and compliance oversight to support informed decision-making and the responsible adoption of technology across the Commonwealth.

The IT Audit Liaison provides technical audit and compliance support for the organization's GRC program. The role involves participating in internal and external audit activities, evaluating the effectiveness of information technology controls, identifying compliance gaps, and supporting remediation efforts to strengthen the organization's cybersecurity and regulatory compliance posture.

Responsibilities

• Coordinate and support information technology audits conducted by internal and external oversight organizations, including GAAP/Single Audit, the Pennsylvania Auditor General, Attorney General, Bureau of Audits, and other regulatory entities.
• Review documentation and technical evidence to determine compliance with applicable laws, regulations, policies, and security standards.
• Evaluate information security and technology controls against established frameworks, including NIST Cybersecurity Framework (CSF), NIST Special Publication 800-53, ISO 27001, and Commonwealth security policies.
• Identify control deficiencies, document findings, and recommend corrective actions to reduce organizational risk.
• Assist business and technical stakeholders in preparing audit responses and collecting supporting evidence.
• Track audit findings, validate corrective actions, and report remediation status and residual risk to management.
• Support the development and maintenance of automated workstreams for audit management, compliance tracking, and evidence collection.
• Develop dashboards, metrics, and executive reports regarding audit trends, compliance posture, and remediation progress.
• Perform risk-based assessments to prioritize audit activities and evaluate control effectiveness.
• Assist in developing audit procedures, compliance documentation, metrics, and management reports.
• Participate in continuous improvement initiatives related to governance, risk management, and internal controls.
• Perform related work as assigned.

Qualifications

Knowledge of:

• Information technology auditing principles and practices
• Cybersecurity governance and risk management
• Internal controls and compliance concepts
• NIST CSF, NIST 800-53, ISO 27001, and related frameworks
• IT infrastructure, applications, cloud technologies, and security controls

Ability to:

• Analyze technical and audit documentation
• Evaluate compliance with policies and standards
• Prepare clear reports and recommendations
• Communicate effectively with technical and non-technical staff
• Organize multiple audit activities simultaneously

Preferred Qualifications:

• Professional certification such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM) or equivalent
• Experience supporting IT audits, regulatory examinations, or compliance assessments

Schedule

Hybrid - 3 days in the office/2 days remote at Forum Building | 607 South Drive | Harrisburg, PA 17120

Interview type: Virtual interview

Location

Harrisburg, PA is the capital city of Pennsylvania, offering a rich history, vibrant cultural scene, and various recreational opportunities.

Benefits
PEAK's benefit offerings available for our associates include medical, dental, vision, Flexible Spending Account (FSA), Dependent Care Savings Account (DCA), and 401K plan. PEAK believes that taking care of our team is essential for success and we are proud to provide benefits that enhance both your well-being and your future. Additionally, our associates may be eligible for Paid Sick Leave as required by Federal, State, or local laws.  

Equal Opportunity Employer (EEO) 
PEAK Technical Staffing is committed to creating a diverse and inclusive environment and is proud to be an Equal Opportunity Employer. PEAK does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status, or any other characteristic protected by applicable law. All employment decisions are made based on qualifications, merit, and business need. We encourage all individuals to apply. 

Americans Disabilities Act (ADA) 
The physical and mental requirements described in this job description are representative of those that must be met by an employee to successfully perform the essential functions of the position. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions. Must be able to perform the essential physical functions of the position, including sitting, standing, walking, stooping, kneeling, and lifting up to 25 pounds, with or without reasonable accommodation. 

Candidate Privacy
To read our Candidate Privacy Information Statement, which explains how we will use your information, please navigate to https://peaktechnical.com/privacy-policy/ and https://peaktechnical.com/ca-residents-privacy-rights/  

AI Recruiting Disclosure 
We use AI-assisted tools to help review applications and compare your experience to job requirements, but all hiring decisions are made by human recruiters. You may request a human-only process or opt out of automated communication at any time. Required notices and our latest bias audit are available on our website: www.peaktechnical.com/ai-disclosure.