Lumen Solutions Group Inc. · 3 months ago
IT Auditor
Lumen Solutions Group Inc. is a company focused on providing IT services, and they are seeking an IT Auditor to ensure vendor compliance with cybersecurity standards. The role involves reviewing contracts, evaluating cybersecurity controls, and preparing audit reports to communicate findings and risks.
Information Technology & Services
Responsibilities
Review vendor contracts, SLAs, and other IT and cybersecurity contractual requirements to confirm compliance with contractual obligations
Evaluate the design and implementation of vendor cybersecurity controls against contractual and industry standards
Collect and analyze evidence such as security policies, system configurations, logs, and access records
Conduct interviews with vendor personnel to assess security practices and governance
Perform control testing and sampling to verify the effectiveness of technical and administrative safeguards
Identify gaps, deficiencies, or non-compliance in vendor controls and assess associated risks
Prepare audit reports summarizing findings, risks, and recommended corrective actions
Track remediation efforts and validate closure of audit findings
Coordinate with internal stakeholders to ensure vendor risks are communicated and addressed
Qualification
Required
Review vendor contracts, SLAs, and other IT and cybersecurity contractual requirements to confirm compliance with contractual obligations
Evaluate the design and implementation of vendor cybersecurity controls against contractual and industry standards
Collect and analyze evidence such as security policies, system configurations, logs, and access records
Conduct interviews with vendor personnel to assess security practices and governance
Perform control testing and sampling to verify the effectiveness of technical and administrative safeguards
Identify gaps, deficiencies, or non-compliance in vendor controls and assess associated risks
Prepare audit reports summarizing findings, risks, and recommended corrective actions
Track remediation efforts and validate closure of audit findings
Coordinate with internal stakeholders to ensure vendor risks are communicated and addressed