Fiserv · 7 hours ago
Information Security Audit and Compliance Manager
Omaha, Nebraska
Full-time
Onsite
Mid, Senior Level
$78K/yr - $138K/yr
5+ years expFiserv is a global leader in Fintech and payments, dedicated to moving money and information securely. The Information Security Audit and Compliance Manager leads audits across IT and cybersecurity, partnering with teams to enhance governance and compliance while driving improvements in control effectiveness.
FinanceFinTechInformation TechnologyFinancial ServicesInformation Services
No H1B
U.S. Citizen Only
Responsibilities
Lead and execute risk-based audits across IT governance, service delivery, project delivery, system development lifecycle, networks, infrastructure, and applications to assess control design and operating effectiveness
Plan engagements: develop scope documents, perform process walkthroughs, build risk and control matrices, and align controls to Federal Financial Institutions Examination Council (FFIEC), National Institute of Standards and Technology (NIST) Special Publication 800‑53, Center for Internet Security (CIS), Defense Information Systems Agency Security Technical Implementation Guides (DISA STIG), Federal Risk and Authorization Management Program (FedRAMP), and Cybersecurity Maturity Model Certification (CMMC) frameworks
Apply Agile audit practices to prioritize the audit backlog, iterate testing, and deliver incremental reporting that accelerates remediation
Execute testing in Microsoft Azure and Azure Government (GovCloud) environments; obtain and evaluate audit evidence; document findings, root cause, and risk; and validate proofs of closure
Coordinate with technology, security, and business stakeholders to validate issues, recommend actionable remediation, and support follow-up testing
Review and update information security audit procedure documents; annually evaluate baseline security controls and update documents and test plans accordingly
Assess controls across Identity, Credential, and Access Management (ICAM); authentication and authorization including single sign-on (SSO) and identity federation; Zero Trust; defense‑in‑depth; data protection; operating system hardening; network security; Continuous Diagnostics and Mitigation (CDM); alerting; audit trails; and incident response
Qualification
Required
5+ years of experience auditing information technology or security processes and operations across IT governance, service delivery, system development lifecycle, networks, infrastructure, and applications
5+ years of cybersecurity audit experience with Microsoft Azure and Azure Government (GovCloud), including evidence collection, control testing, and reporting
Experience mapping and testing controls against FFIEC, NIST 800‑53, CIS benchmarks, DISA STIGs, FedRAMP requirements, and CMMC practices
Experience collaborating directly with external clients, business leadership, and independent auditors to drive remediation and measurable improvements in control effectiveness and regulatory compliance
Ability to develop scope documents, perform process walkthroughs, build risk and control matrices, and write clear, defensible audit findings with risk statements and recommendations
Hands-on knowledge of ICAM; authentication and authorization including SSO and identity federation; Zero Trust; defense-in-depth; data protection; operating system hardening; network security; CDM; alerting; audit trail design; and incident response
Bachelor's degree and/or equivalent combination of education, related experience and/or military experience
Preferred
Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or CompTIA Security+, or equivalent credentials
Experience performing audits in public sector environments (e.g., FedRAMP High, DISA STIG hardening) or supporting CMMC readiness assessments
Experience using data analytics and scripting (e.g., SQL, Python or similar object-oriented language) to automate control testing and evidence analysis
Benefits
Fuel Your Life program to support your physical, financial, social, and emotional well-being.
Paid holidays and generous time away policies.
No-cost mental health support through Employee Assistance Programs.
Living Proof program to recognize your peers’ extra effort with points redeemable for .rewards.
Eight Employee Resource Groups to foster a collaborative culture and expand your network.
Unparalleled professional growth with training, development, and internal mobility opportunities.
Medical, dental, vision, life, and disability insurance options available from day one.
Retirement planning and discounted shares with the Employee Stock Purchase Plan.
Tuition assistance and reimbursement program.
Paid parental, caregiver, and military leave.
Company
Fiserv
Fiserv is a provider of technology solutions to the financial services industry.
10001+ employees
Funding
Current Stage
Public CompanyTotal Funding
$2.48BKey Investors
BlackBird Financial LP
2026-01-06Post Ipo Equity
2025-04-29Post Ipo Debt· $2.48B
1986-10-03IPO
Leadership Team
Michael Lyons
President and CEO-Elect, Fiserv
Robert Hau
EVP, CFO
Recent News
Crowdfund Insider
2026-02-05
2026-02-03
Company data provided by crunchbase