Cybersecurity Auditor

Vintti is a cutting-edge staffing agency revolutionizing the way US companies build their teams. Leveraging advanced technology and embracing the power of remote work, we connect SMBs, startups, and firms across the United States with top-tier talent from Latin America. Our platform seamlessly integrates professionals into US business ecosystems, regardless of physical borders. Vintti operates on the principle of a borderless future of work, where skills and expertise trump geographical constraints.

A Cybersecurity Auditor is a vital figure in ensuring an organization's information security protocols are robust and effective. They systematically evaluate security policies, procedures, and controls to identify vulnerabilities and ensure compliance with regulatory standards. By conducting thorough assessments, audits, and penetration tests, they help to safeguard sensitive data against cyber threats. Cybersecurity Auditors also play a crucial role in recommending enhancements, ensuring that all security measures align with industry best practices, and fostering a culture of continuous improvement in cybersecurity resilience.

- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field
- Professional certifications such as CISA, CISSP, CISM, or similar
- Minimum of 3-5 years of experience in cybersecurity auditing or a related field
- In-depth knowledge of security frameworks and standards such as NIST, ISO 27001, PCI-DSS, and GDPR
- Proficiency in performing vulnerability assessments and penetration testing
- Experience with security tools and technologies such as SIEM, firewalls, IDS/IPS, and antivirus software
- Strong understanding of network security, cloud security, and application security
- Knowledge of disaster recovery and business continuity planning
- Familiarity with compliance requirements and regulatory standards
- Strong analytical and problem-solving skills
- Excellent written and verbal communication skills
- Ability to prepare detailed audit reports with clear findings and recommendations
- Strong collaboration skills to work with IT and security teams
- Ability to assess and recommend security controls and mitigation strategies
- Proficiency in reviewing and analyzing security logs and alerts
- High attention to detail and accuracy in audit processes and documentation
- Capable of conducting interviews and consultations effectively
- Ability to develop and update audit programs and checklists based on best practices
- Experience with incident response activities and breach analysis
- Willingness to stay updated on evolving cybersecurity threats and trends
- Ability to provide training and guidance on security best practices and compliance
- Organizational skills to track and ensure remediation of audit findings
- Familiarity with the adoption and implementation of new security tools and technologies
- Commitment to maintaining confidentiality and security of sensitive information

- Conduct regular audits of security systems, policies, and procedures.
- Perform vulnerability assessments and penetration testing.
- Evaluate IT infrastructure for security risks.
- Review and analyze security logs, alerts, and reports.
- Prepare detailed audit reports with findings and recommendations.
- Collaborate with IT and security teams on security controls.
- Assess disaster recovery plans and backup procedures.
- Verify proper implementation of security patches and updates.
- Participate in incident response activities.
- Maintain up-to-date knowledge of cybersecurity threats and regulations.
- Test and evaluate security policies and procedures.
- Coordinate with external compliance auditors and regulatory bodies.
- Develop and update audit programs and checklists.
- Provide guidance and training on security best practices.
- Conduct interviews and consultations for audits.
- Track remediation of security audit findings.
- Recommend adoption of new security tools and technologies.
- Assist in developing security awareness programs.
- Monitor compliance with data protection and privacy regulations.
- Document and maintain records of audit procedures and findings.

The ideal candidate for the Cybersecurity Auditor role is a highly detail-oriented and analytical professional with a strong technical background and a fervent dedication to maintaining and enhancing organizational security. They hold a bachelor's degree in Cybersecurity, Information Technology, or Computer Science, augmented by notable professional certifications such as CISA, CISSP, or CISM. With a robust experience of 3-5 years in cybersecurity auditing or similar domains, they possess deep expertise in renowned security frameworks and standards like NIST, ISO 27001, PCI-DSS, and GDPR. Their proficiency in performing vulnerability assessments, penetration testing, and utilizing advanced security tools like SIEM, firewalls, and IDS/IPS is well established. Demonstrating exceptional problem-solving and analytical skills, they have a comprehensive understanding of network, cloud, and application security. This professional excels in collaborating with IT and security teams, effectively training and guiding staff on security best practices, and maintaining strict confidentiality. They exhibit superior written and verbal communication abilities, preparing precise, insightful audit reports, and conducting meaningful interviews and consultations. Adept at managing multiple priorities, they stay agile in dynamic environments, ensuring seamless adherence to compliance and proactive incident response. The ideal candidate is proactive, self-motivated, committed to continuous learning, and demonstrates unparalleled integrity and resilience under pressure, making them an indispensable asset to any organization-focused on fortifying its cybersecurity posture.

- Conduct regular audits of security systems, policies, and procedures to ensure compliance with industry standards and regulations.
- Perform vulnerability assessments and penetration testing to identify potential security weaknesses.
- Evaluate IT infrastructure for security risks and recommend mitigation strategies.
- Review and analyze security logs, alerts, and reports from various monitoring and logging systems.
- Prepare detailed audit reports documenting the findings, risk assessments, and recommended corrective actions.
- Collaborate with IT and security teams to ensure security controls are implemented and functioning effectively.
- Assess the effectiveness of disaster recovery plans and backup procedures.
- Verify the proper implementation of security patches and updates across all systems and applications.
- Participate in incident response activities to analyze and contain security breaches.
- Maintain up-to-date knowledge of cybersecurity threats, trends, and regulatory requirements.
- Test and evaluate the organization's security policies and procedures.
- Coordinate with external compliance auditors and regulatory bodies as necessary.
- Develop and update audit programs and checklists based on industry best practices.
- Provide guidance and training to staff on security best practices and compliance requirements.
- Conduct interviews and consultations with department heads and employees to gather information for audits.
- Track and ensure timely remediation of security audit findings.
- Evaluate and recommend the adoption of new security tools and technologies.
- Assist in developing and implementing organization-wide security awareness programs.
- Monitor compliance with data protection and privacy regulations.
- Document and maintain records of audit procedures, findings, and actions taken.

- Strong analytical and critical thinking ability
- High attention to detail
- Excellent problem-solving skills
- Effective written and verbal communication
- Proactive and self-motivated
- Ability to work independently and as part of a team
- Strong organizational and time management skills
- Adaptable to changing priorities and demands
- Discreet and committed to maintaining confidentiality
- Up-to-date knowledge of evolving cybersecurity threats and trends
- Strong collaboration and interpersonal skills
- Ability to train and provide guidance effectively
- High level of integrity and ethical standards
- Resilient under pressure and in high-stress situations
- Continuous learner with a commitment to professional development
- Strong decision-making capability
- Meticulous in documentation and audit processes
- Technologically savvy with a curiosity for new tools and methods
- Results-driven and goal-oriented

- Competitive salary commensurate with experience
- Health, dental, and vision insurance
- 401(k) retirement plan with company match
- Paid time off, including vacation, sick leave, and holidays
- Flexible work schedule with remote work options
- Professional development and certification reimbursement
- Tuition assistance for further education
- Employee wellness programs and assistance plans
- Life and disability insurance coverage
- Employee recognition and rewards programs
- Opportunities for career advancement and promotion within the company
- Access to cutting-edge technology and security tools
- Inclusive and diverse work environment
- Regular team-building activities and company events
- Commuter benefits and travel reimbursement
- Childcare assistance and parental leave policies
- Access to online training courses and industry conferences
- Collaborative and supportive work culture
- Gym membership discounts and on-site fitness facilities (where available)