IT Auditor Staff, Corporate Technology – Cybersecurity

First American

. Execute assigned testing for Corporate Technology and Cybersecurity operational audits .

Posted 11/2/2026full-timeSanta Ana • California • United StatesLead💰 $73,900 - $98,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT audit and cybersecurity operational audits, with a strong focus on risk-based testing, evidence evaluation, and documentation. Proficient in cloud security controls and familiar with industry standards and regulations relevant to technology risk.

Highest-signal resume keywords

IT Audit ExperienceCybersecurity Audit ExperienceRisk-Based Audit TestingCloud Security ControlsCISA Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Operational Audit TestingControl AssessmentsEvidence EvaluationSampling TechniquesDocumentation of WorkpapersIAM/PAMActive DirectoryVulnerability ManagementData ProtectionEncryption

Soft Skills

Analytical SkillsWritten CommunicationVerbal CommunicationProblem-SolvingTime Management

Tools & Technologies

AuditBoardPower BIServiceNowJiraCyberArk

Certifications & Qualifications

CISARelevant IT Certifications

Industry Keywords

GLBAPCI DSSNIST CSFSWIFT CSPOWASPCIS BenchmarksInternal Audit StandardsCloud Security ArchitectureSIEMSOAR

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityFirewallsSDLCServiceNowSwift

About the role

Key responsibilities & impact

Execute assigned testing for Corporate Technology and Cybersecurity operational audits
Perform walkthroughs, control assessments, population validation, sample selection, evidence inspection, reperformance, and follow-up testing
Test controls across IAM/PAM, Active Directory, network security, firewalls, cloud security architecture, WAF, Security Operations, incident response, SIEM/XDR/SOAR, vulnerability management, CTI, data protection and privacy, DLP, encryption, key management, application security, and Secure SDLC
Inspect and test technical and architecture evidence, including configurations, access records, scan results, change records, logs, encryption, certificates, and documented exceptions
Apply cloud-provider security guidance during audits of cloud environments
Evaluate evidence for completeness, reliability, relevance, and consistency with control objectives
Identify gaps and contradictions and raise them promptly
Document procedures, evidence, sample details, results, exceptions, and conclusions in traceable workpapers
Participate in walkthroughs and client discussions; explain evidence requests and testing questions
Analyze exceptions and support assessment of cause, impact, extent, and compensating controls
Support issue development, report preparation, issue validation, and examination support materials
Use audit tools and data analysis techniques to validate populations, identify anomalies, and improve testing coverage
Incorporate review comments and maintain audit files according to Internal Audit quality standards

Requirements

What you’ll need

At least 3 years of relevant experience in IT audit, cybersecurity audit, technology risk, or related control testing
At least 2 years directly performing IT or cybersecurity operational audits
Hands-on operational audit testing in at least one target profile: IAM/PAM, CyberArk, Active Directory, firewall/network controls, cloud security/WAF, SIEM/XDR/SOAR, DLP, encryption/key management, or vulnerability evidence
Working knowledge of risk-based audit testing, evidence evaluation, sampling, workpaper documentation, and communicating exceptions
Familiarity with official security guidance for Microsoft Azure, AWS, and Google Cloud
Ability to manage assigned testing, meet deadlines, and raise questions or concerns promptly
Strong analytical, written, and verbal communication skills
Preferred: experience across multiple technology or cybersecurity audit areas
Preferred: banking or financial-services experience and exposure to GLBA, Interagency Guidelines, SWIFT CSP, PCI DSS, OWASP, CIS Benchmarks, NIST CSF, or NIST SP 800-series guidance
Preferred: hands-on exposure to cloud environments or cloud security controls
Preferred: CISA or another relevant certification, or active progress toward one
Preferred: relevant IT or cybersecurity coursework, professional training, or hands-on experience
Preferred: familiarity with AuditBoard, Power BI, ServiceNow, Jira, or SailPoint

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
401(k)
PTO/paid sick leave
Employee stock purchase plan
Inclusive workplace culture
Equal opportunity employment