Information Technology Auditor

IT Audit & Control

Duration : 24+ Months Contract

Location : Jersey City, NJ (Hybrid 3 days onsite a week)

Job Description :

• Instrumental in establishing and enhancing IT controls to strengthen cybersecurity measures and fraud detection, enabling clients to build resilient business processes centered on people and technology.
• Support the creation, implementation, and rigorous testing of Business Continuity and Disaster Recovery (BC / DR) plans to ensure organizational resilience and rapid recovery during adverse events.
• Conducted comprehensive evaluations of clients' IT internal controls and policies, benchmarking against industry standards and recommending improvements, including password complexity enhancements and single sign-on policy implementations.
• Ensured adherence to Information Security policies encompassing Cybersecurity Plans, Access Controls, Change Management, Computer Operations, Backup and Recovery, and BC / DR policies aligned with NIST Cybersecurity standards.
• Evaluated the SDLC and Change Management processes by reviewing control design and effectiveness in managing new development initiatives, ensuring compliance with organizational policies and regulatory requirements.
• Verified that all changes in IT systems are authorized, approved, adequately tested, and comply with segregation of duty controls before production deployment.
• Conducted evaluations of access controls limiting user permissions across applications, networks, operating systems, ERP, and databases, ensuring proper termination or transfer of user entitlements in accordance with policies.
• Assessed computer operations controls including regular data backups, physical security enforcement, and incident reporting / resolution within stipulated timelines.
• Monitored critical system components such as job schedulers and ensured timely incident management, contributing to sustained operational availability and security.