Senior IT Auditor, Corporate Technology – Cybersecurity

First American

. Lead day-to-day planning and fieldwork for assigned technology and cybersecurity audits .

Posted 10/30/2026full-timeSanta Ana • California • United StatesSenior💰 $97,700 - $130,300 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in leading technology and cybersecurity audits, including configuration-focused testing and risk assessment. Proficient in audit methodology, evidence evaluation, and documentation, with strong analytical and communication skills.

Highest-signal resume keywords

IT Audit ExperienceCybersecurity Audit ExperienceConfiguration-Focused TestingAudit Methodology KnowledgeRisk And Control Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CyberArk/PAMActive Directory ArchitectureNetwork SecurityCloud Security ArchitectureVulnerability ManagementData Loss PreventionEncryption/Key ManagementIncident ResponseSecure SDLCITGC Testing

Soft Skills

Analytical SkillsWritten CommunicationVerbal CommunicationLeadershipGuidance

Tools & Technologies

AuditBoardPower BIServiceNowJiraSailPoint

Industry Keywords

GLBAPCI DSSNIST CSFCIS BenchmarksSWIFT CSPInteragency GuidelinesOWASPAWS Well-Architected Security PillarAzure Network Security Best PracticesGoogle Cloud Well-Architected Security Guidance

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityFirewallsSDLCServiceNowSwift

About the role

Key responsibilities & impact

Lead day-to-day planning and fieldwork for assigned technology and cybersecurity audits
Coordinate audit procedures, walkthroughs, risk and control mapping, test procedures, sampling, work allocation, milestones, and status reporting
Refine audit objectives and scope with the Manager
Identify dependencies, system boundaries, shared services, regulations, and program components that could leave material risks unaddressed
Coordinate discussions with control owners, technical SMEs, and project stakeholders
Guide Staff auditors in testing, evidence collection, documentation, and exception follow-up
Review workpapers for accuracy, traceability, and alignment with approved testing approaches
Perform walkthroughs, control assessments, population validation, sample selection, evidence inspection, reperformance, and follow-up testing
Test controls across technology programs including security operations, incident response, endpoint and network security, data protection, application security, vulnerability management, IAM, cloud, IT operations, change management, Secure SDLC, and business continuity/disaster recovery
Inspect security-technology configurations and compare sampled settings and rules against approved baselines and requirements
Assess evidence relevance, reliability, completeness, and consistency with control objectives
Document procedures, evidence, samples, results, exceptions, and conclusions in audit workpapers
Analyze exceptions and support observations and practical recommendations
Use data analysis, scripts, and audit tools to validate populations, identify anomalies, and improve testing coverage
Prepare status updates, report content, issue validation, and examination support materials
Maintain project status, risks, issues, dependencies, and deliverables
Draft audit findings, recommendations, management responses, and report sections
Lead configuration-focused testing in the assigned specialty

Requirements

What you’ll need

At least 5 years of relevant IT audit, cybersecurity audit, technology risk, or related control experience
Experience coordinating audit fieldwork and guiding other auditors
Experience with IT or cybersecurity operational audit work; general ITGC testing alone is not sufficient
Ability to independently lead configuration-focused audit testing in CyberArk/PAM, Active Directory architecture, firewalls, segmentation, network security, cloud security architecture/WAF, SIEM/XDR/SOAR, DLP, encryption/key management, or vulnerability management
Familiarity with official security guidance for Microsoft Azure, AWS, and Google Cloud
Knowledge of Azure network security best practices, AWS Well-Architected Security Pillar, and Google Cloud Well-Architected security guidance
Strong working knowledge of audit methodology, risk and control assessment, sampling, evidence evaluation, workpaper documentation, and issue development
Strong analytical, written, and verbal communication skills
Ability to manage assigned testing with limited day-to-day direction
Relevant IT or cybersecurity coursework, professional training, or hands-on experience valued
Banking or financial-services experience and exposure to GLBA, Interagency Guidelines, SWIFT CSP, PCI DSS, OWASP, CIS Benchmarks, NIST CSF, or NIST SP 800-series guidance preferred or valued
Familiarity with AuditBoard, Power BI, ServiceNow, Jira, or SailPoint helpful

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
401k
PTO/paid sick leave
Employee stock purchase plan
Inclusive workplace culture
Equal opportunity employment