Title: IT Auditor
Duration: Full Time
Location: Houston, TX
Job Description
Must Have Technical/Functional Skill
- IT Audit, ITGC, SOX Compliance, ISO 27001 (ISMS), Risk & Compliance, Control Testing, Audit Governance, Stakeholder Management
- Act as Senior IT Audit Lead responsible for executing IT audit engagements.
- Perform assessment of ITGC and ISO 27001 Annex A controls across access management, change management, IT operations, asset management, vendor risk, and business continuity.
- Support SOX and ISO 27001 audits, including control design, operating effectiveness testing, evidence validation, and audit reporting.
- Review compliance against information security policies, ISMS processes, and risk treatment plans.
- Identify gaps in ISMS implementation, control effectiveness, and compliance adherence, and recommend remediation.
- Support internal and external audits including ISO 27001 certification / surveillance audits.
- Prepare audit documentation including control matrices aligned to SOX + ISO 27001 frameworks.
- Track remediation and validate closure in line with audit and compliance timelines.
- Engage with stakeholders across IT, Cybersecurity, Engineering, Operations, and compliance teams.
- Strong experience in IT Audit / ITGC / SOX compliance.
- Hands-on experience in ISO 27001 implementation, audit, or ISMS governance.
Strong understanding of ISO 27001 Annex A controls, including:
- Access Control
- Cryptography
- Asset Management
- Operations Security
- Supplier Security
- Incident Management
- Business Continuity
Experience in control design and operating effectiveness testing across SOX and ISO 27001.
Ability to assess ISMS maturity, risk treatment plans, and policy compliance.
Strong experience in audit documentation, workpapers, and governance reporting.
Experience working with external auditors for SOX / ISO audits.
Strong stakeholder management (client IT, cybersecurity, audit teams, leadership).
Roles & Responsibilities
Tools & Technologies / Frameworks
Audit / GRC Tools
ServiceNow GRC / Archer / AuditBoard
Compliance Frameworks
- SOX IT Controls
- ISO 27001 (ISMS)
- COBIT
- NIST CSF
ISO 27001 Governance Areas
- ISMS implementation & audit readiness
- Risk assessment & risk treatment planning
- Policy & procedure compliance
- Internal audit / certification support
- Continuous compliance monitoring
ITGC Areas
- Access Management
- Change Management
- IT Operations
- Backup & Recovery
- Incident Management
Enterprise Technology Areas
- ERP / business applications
- Infrastructure (OS / DB / Network)
- Cloud (Azure / AWS)
- IAM & Security Platforms
Reporting & Governance
Audit dashboards
ISO compliance status
Risk reporting & remediation tracking
Responsibility of / Expectations from the Role
- Act as Senior IT Audit Lead with ISO 27001 focus.
- Perform ITGC and ISO 27001 control assessments (Annex A).
- Evaluate ISMS maturity, policy compliance, and control effectiveness.
- Support ISO 27001 certification, recertification, and surveillance audits.
- Conduct audit walkthroughs, collect evidence, and perform control testing.
- Identify gaps in security controls, ISMS processes, and compliance adherence.
- Prepare audit observations aligned to risk and compliance impact.
- Coordinate with IT, cybersecurity, and compliance teams for remediation.
- Track audit findings and ensure timely closure.
- Provide audit and compliance updates to leadership and customer stakeholders.
- Ensure audit artefacts are aligned with SOX + ISO 27001 standards and audit expectations.
- Work closely with offshore teams (if applicable) for audit support and documentation.
Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.