Cyber Auditor Job at RealmOne (Fairfax)

Senior Auditor - Cyber & Infrastructure IA

The Senior Auditor is responsible for performing moderately complex audits and a...

Location

Canada , Mississauga

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

5-8 years of relevant experience in Cyber or Information Security Risk or Audit Roles
Professional Certification preferred (CISA, CISSP, CIA, CPA, etc.)
Experience working with Excel, array formulas and integrating with external data sources
Experience with data in Access and integrating with external data sources and Excel tools
Effective verbal, written, and negotiation skills
Effective project management skills
Effective influencing and relationship management skills
Experience in data quality and governance analysis
Strong data analytics skills
Demonstrated ability to remain unbiased in a diverse working environment

Job Responsibility

Complete assigned audits within budgeted timeframes, and budgeted costs
Monitor, assess, and recommend solutions to emerging risks
Contribute to the development of audit process improvements, including the development of automated routines to help focus audit testing
Draft audit reports, and present issues to the business while discussing practical cross-functional solutions
Recommend appropriate and pragmatic solutions to risk and control issues
Apply understanding of internal audit standards, policies, and local regulations to provide timely audit assurance
Develop internal audit staff, and provide coaching to team members
Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards

Fulltime

Manager, Risk Management Cyber Security

This role sits within the Second Line of Defence (2LOD) Risk function and provid...

Location

United Kingdom , London

Salary:

Not provided

Mastercard

Expiration Date

Until further notice

Requirements

Professional cyber security certifications (e.g., CRISC, CISA, CISM, CISSP, ISO 27001 Lead Auditor) preferred
Knowledge of key cyber security relevant control domains, frameworks and standards (e.g., NIST, ISO27001, CSF, CRI, MITRE, etc.)
Strong understanding of risk management principles and the Three Lines of Defence model
Enthusiastic about cyber security including tracking industry trends and emerging risks
Experience of applying operational risk frameworks and understanding of risk assessment methodologies
Proven experience in Cyber Security risk and controls oversight within a financial institution or critical infrastructure environment
Ability to analyse complex data with attention to detail and articulate risk insights clearly to technical and non-technical audiences
Skilled in building trusted relationships with stakeholders at all levels
Highly organised, adaptable, and able to work independently with minimal supervision and as part of a team
Excellent written and verbal communication skills

Job Responsibility

Provide second line expertise and challenge around all aspects of Cyber Security related risks
Support the Vocalink risk management approach and implemented policies and procedures to minimize Cyber Security risk exposure and drive robust controls
Support the implementation and embedding of the Enterprise Risk Management Framework for Cyber Security risk, ensuring completeness and accuracy of risk assessments, control standards, residual risk evaluations, and issue management
Partner with first line Cyber Security teams to promote balanced risk-taking and a strong risk culture
Represent Cyber Security risk at relevant committees and forums, deputising for the VP Risk Management when required
Provide clear and concise risk briefings to senior stakeholders, including the CRO ensuring timely escalation of material risks and appetite breaches
Liaise with and support the risk and control owners to resolve any questions, queries and challenges relating to cyber security relevant certification and or customer requirements for example, during an audit as well as in the pre and post audit stages

Fulltime

Cyber Security Consultant - Third Party Auditor

Cyber Security Consultant - Third-Party Auditor - £500-£550 per day - Inside IR3...

Location

United Kingdom , Gloucester

Salary:

Not provided

Morson Talent

Expiration Date

Until further notice

Requirements

Practical working knowledge of international standards and information security frameworks (ISO27001, ISO27017, GDPR, Cyber Essentials Plus), including auditing control design and operating effectiveness against these frameworks
Proven experience conducting end-to-end audits or formal assurance reviews within a regulated environment (planning, walkthroughs, control testing, evidence validation, reporting and follow-up)
Experience assessing third-party or supplier environments
Understanding of HMG Security Policy Framework and NCSC/CPNI guidance and how to test compliance through audit evidence
Awareness of information security threats, risks and common control failures
Experience applying risk assessment methodologies (ISO27005, NIST, IRAM2) to support audit scoping and risk-rating of findings
Strong documentation and report writing skills - able to produce structured audit reports containing observations, root cause analysis and defensible conclusions
Ability to challenge stakeholders constructively and obtain sufficient appropriate audit evidence
Excellent written and verbal communication skills
Strong analytical mindset, professional scepticism, attention to detail and persistence

Job Responsibility

Plan and scope third-party audits based on risk, regulatory requirements and contractual obligations
Conduct audit walkthroughs and structured control interviews
Test design and operating effectiveness of security controls
Perform sampling and traceability testing across processes and systems
Obtain, validate and challenge audit evidence (e.g. logs, system extracts, configurations, tickets, approvals)
Assess compliance against ISO27001, ISO27017, GDPR, Cyber Essentials Plus and relevant sector frameworks
Identify control weaknesses and determine root causes
Form clear, risk-rated findings with practical recommendations
Produce structured audit reports suitable for senior governance review and regulatory scrutiny
Track and verify remediation actions through to closure

Fulltime

Principal Auditor- Cyber, Risk and Analysis Technology Audit

Capital One’s Audit function is a dedicated group of professionals focused on de...

Location

United States , McLean

Salary:

119400.00 - 163500.00 USD / Year

Capital One

Expiration Date

Until further notice

Requirements

Bachelor’s Degree or military experience
At least 4 years of experience in information technology (operations, software delivery, access management, microservices), information security (application security, network security, cyber security, data protection), information systems risk management, information systems auditing, or a combination
At least 1 year of experience in cloud computing and controls (design, operation, risk management, or auditing)
At least 2 years of experience in managing components of audit engagements, project management or a combination
At least 2 years of experience in analyzing data extracts to identify trends, patterns, and anomalies, including 1 year of experience in test scripting or coding (writing, reviewing, assessing)

Job Responsibility

Execute major components of audits, including critical technology functions, cloud-based infrastructure, cybersecurity, risk management, application, and third-party management, as well as the ability to assist in leading components of small to medium size audits
Perform risk assessments of business units and technology operations, design and execute audit procedures to verify the effectiveness of existing controls, identify and define issues, review and analyze evidence, and document client processes and procedures
Understand the broader context and implications (e.g., financial, legal, reputational, etc.) of the various types of risk affecting the business and critical technology functions
Establishes and maintains good client relations during engagements
Communicates or assists in communicating the results of some audit projects to management via written reports and oral presentations
Identify expectations of the client and take actions to support the client experience
Prepare clear, organized and complete documentation to support work performed
Self prioritize and effectively plan own work activities managing multiple priorities and tasks across the team to deliver quality results
Coordinate with others and proactively take on additional work
Deliver appropriate, succinct and organized information, tailoring communication style to audience

What we offer

performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)
comprehensive, competitive, and inclusive set of health, financial and other benefits

Fulltime

Audit Manager - Global Payment Network

Capital One’s Audit function is a dedicated group of professionals focused on de...

Location

United States , McLean, Virginia; Chicago, Illinois; Richmond, Virginia; Plano, Texas; New York, New York; Riverwoods, Illinois; Charlotte, North Carolina

Salary:

149800.00 - 205100.00 USD / Year

Capital One

Expiration Date

Until further notice

Requirements

Bachelor’s Degree or military experience
At least 5 years of experience in internal or external auditing, accounting, financial analysis, information systems, compliance, risk management or a combination within the banking or financial services industry

Job Responsibility

Plan, perform, and lead large/complex audits at the enterprise level as well as other diverse lines of business and specialty areas
Perform risk assessments of business activities, potential exposures and materiality of loss
Design and perform audit procedures, including identifying and defining issues, reviewing and analyzing evidence, and documenting processes
Leverage available data and analytical tools during the planning, fieldwork, and reporting phases of audit delivery
Effectively review and compile relevant, material findings and recommendations into readable and concise audit reports
Communicate the results of audit projects to management via written reports and compelling oral presentations
Provide significant input into the development of the annual audit plan
Design and execute internal control testing for standardized operations of moderate complexity with more than one component, including finance, IT, compliance, credit, security
Provide risk management advice and counsel to business leadership on best practices
Establish and maintain good working relationships with line management and auditees during engagements

What we offer

comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being
performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)

Fulltime

Cyber Security Manager

A leading housing association is seeking an experienced Cyber Security Manager t...

Location

United Kingdom , Tameside

Salary:

56000.00 GBP / Year

Goodman Masson

Expiration Date

Until further notice

Requirements

5+ years hands-on technical experience in network/security
2+ years in a senior/lead cybersecurity role
Leadership of teams and delivery of security strategies/policies
Deep knowledge of key frameworks (ISO27001, NIST CSF, CIS Controls, Cyber Essentials Plus)
Experience in risk management, incident response, vulnerability management/remediation, third-party security, and stakeholder engagement
Relevant certifications (e.g., CISSP, CISM, CCNP Security, CEH, ISO27001 Lead Implementer/Auditor-or equivalent experience)
Degree in Cyber Security, IT, Computer Science (or equivalent experience)

Job Responsibility

Developing and maintaining security strategies, policies, standards, and procedures
Providing senior leadership with insightful reports, dashboards, and actionable recommendations
Leading cyber risk assessments, third-party risk management, vulnerability remediation, patch management
Overseeing incident management, coordinating audits, penetration testing, and contributing to disaster recovery/business continuity
Mentoring and developing the team
Building strong relationships with stakeholders, executive leaders, SOC partners, vendors, and auditors
Championing security awareness across the organisation

What we offer

24 days annual leave + 3 days Christmas closure + bank holidays
Flexible working: Compressed hours/4-day week possible
Hybrid (50% home working after probation)
Competitive pension (Social Housing Pension Scheme)
Occupational sick pay
BHSF health membership
Enhanced parental leave
Training/development opportunities
On-site gyms

Fulltime

Secure by Design - OIT

We are seeking an experienced cyber security professional to lead secure‑by‑desi...

Location

India , Pune

Salary:

Not provided

Vodafone

Expiration Date

Until further notice

Requirements

Experienced in information technology and cyber security, with strong capability in securing Office IT products and services
Skilled in cloud security, particularly Microsoft environments including O365 Security & Compliance, Azure, Microsoft Defender, Copilot and productivity platforms
Strong understanding and hands‑on experience with AI governance, LLM risk management, prompt security and secure deployment of enterprise AI solutions
Solid knowledge of Enterprise Risk Management, including identifying, assessing and mitigating risks in cloud, AI systems, data security and Office IT applications
Experienced in agile methodologies and familiar with Office IT landscapes across desktop, web and mobile
In‑depth understanding of collaboration ecosystems, real‑time communications, and secure identity management
Excellent communication skills, with the ability to translate technical risks into clear business‑focused language
Holds a degree in Information Security or equivalent, along with one or more professional certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, GIAC, TOGAF or SABSA
5+ years in cyber security, 10+ years with Microsoft O365 and Microsoft security services, and 5+ years in cloud security

Job Responsibility

Carry out technically focused security assessments for Office IT products, services and infrastructures, ensuring secure-by-design principles are consistently applied
Define, document and validate security requirements for Office IT solutions, enabling appropriate security controls and risk mitigation
Provide technical security guidance to global projects and programmes, particularly those involving Microsoft 365, Azure, Microsoft Defender, Copilot, collaboration platforms, identity systems and cloud-based services
Assess technology risk and compliance levels, identify gaps, recommend treatment plans and support risk reduction aligned with enterprise standards
Serve as a key security contact for Office IT stakeholders, communicating risks and requirements clearly to both technical and non-technical audiences
Provide advice to internal teams, suppliers and third parties, ensuring alignment with Vodafone’s security standards and processes
Coach and support Security Champions within agile teams to embed secure‑by‑design practices in day-to-day work
Collaborate closely with architecture, operations, Risk & Compliance, Ethical Hacking, Security Operations and Corporate Security teams
Support the implementation of AI security controls, including governance for Large Language Models (LLMs), secure deployment patterns, and prompt security practices
Help evolve secure‑by‑design processes and promote security as a business enabler, driving innovation and positive change

What we offer

Influence the security posture of global Office IT services used across Vodafone’s enterprise and consumer ecosystems
Work at the forefront of cloud, collaboration and AI security, including Microsoft Defender, Azure, O365 Security & Compliance and Copilot
Collaborate with diverse global teams, suppliers and security functions across Group and local markets
Play a key role in shaping secure‑by‑design perceptions and helping security become a business enabler
Gain exposure to high‑impact decision‑making during commercial launch approvals and major programme deliveries

Fulltime

Business Information Security Officer

A senior individual contributor role serving as the cybersecurity liaison for HP...

Location

Ireland , Leixlip

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

12+ years of experience in cybersecurity, risk management, or related fields, with significant exposure to financial services regulatory environments
proven ability to partner with business executives and influence decision-making through clear articulation of cyber risk in business and regulatory terms
deep knowledge of cybersecurity frameworks and controls relevant to financial institutions (NIST, ISO 27001, DORA, SOX, GDPR, etc.)
experience engaging with financial regulators, auditors, and external examiners on cybersecurity compliance
strong understanding of incident response processes, with the ability to coordinate remediation and communication at the business unit level
exceptional communication, stakeholder management, and executive presence
bachelor’s degree required
advanced degree and/or certifications (e.g., CISM, CISSP, CRISC) preferred.

Job Responsibility

act as the primary cybersecurity liaison for HPEFS, partnering with executives to translate cyber risk into business and regulatory impact and enable informed leadership decisions
inform the HPEFS leadership about emerging cyber threat landscape to be proactive in protecting the business
drive cybersecurity strategies tailored to the regulatory environment for financial services, including but not limited to Central Bank of Ireland requirements, Digital Operational Resilience Act (DORA), SOX, GDPR (cyber-related obligations)
lead cyber risk assessments for products, services, and bank operations, ensuring controls meet both enterprise and banking regulatory expectations
serve as the on-point liaison during security incidents impacting HPEFS, coordinating with CDRM’s centralized incident response team and driving business-side remediation and communication
oversee vulnerability management for HPEFS assets, ensuring issues are tracked, prioritized, and remediated in alignment with regulatory timelines and enterprise standards
partner with the HPEFS IT leader to align on security priorities, infrastructure controls, and technology programs impacting financial services operations
support closure of audit, regulatory, and compliance findings through coordination of corrective action plans and, where appropriate, risk acceptance processes
monitor evolving regulatory requirements and industry trends, advising leadership on compliance gaps, risk exposure, and readiness for regulatory examinations
influence enterprise cybersecurity priorities by advocating for HPEFS needs within the broader CDRM strategy

What we offer

health and wellbeing benefits
personal and professional development programs
unconditional inclusion in the workplace.

Fulltime

Cyber Auditor

RealmOne

Location:
United States , Fairfax

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
April 16, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Cyber Auditor