[Hiring] Cybersecurity Auditor @Kyndryl

Role Description

The Role involves:

• Cybersecurity experience and knowledge of security, internal controls, auditing, and risk management frameworks, including ISO 27000, COSO, NIST, COBIT, IPPF, and ITIL.
• Experience auditing or reviewing IT controls, processes, and security configurations, including:
  • Change, incident, access, patch, API, inventory, vulnerability, operations, database, and risk management
  • Authentication and authorization
  • Secure system and application configuration
  • Data integrity and protection
  • Security assessments
  • Business continuity and disaster recovery
• Execute risk-based audits by:
  • Defining objectives
  • Evaluating processes and related risks
  • Designing and performing control testing
  • Assessing whether controls effectively mitigate risks
  • Communicating impacts on objectives
  • Developing recommendations
  • Preparing final reports that clearly state the effectiveness of controls for each identified risk
• Communicate issues, risks, and technical information clearly and professionally in English to both technical and non-technical audiences.
• Demonstrate strong analytical and critical-thinking skills.
• Lead teams of IT auditors on assigned audit engagements.
• Demonstrate excellent time-management skills.
• Hold at least one relevant professional certification, such as CISA, CISM, or CISSP, PCIP.

Qualifications

• 5+ years of professional experience in Information Technology, Cybersecurity, Information Security, Technology Risk, IT Operations, Application Development, Cloud Technologies, or a related technical field.
• Experience in Cybersecurity, SOX, Risk Management, or IT auditing.
• Strong knowledge of Cybersecurity laws, regulations, and standards.
• Familiarity with COBIT, ISO 27001/27002, NIST, COSO, and general security practices.
• Ability to execute risk-based audits by defining objectives, assessing processes and risks, testing control effectiveness, communicating impacts, developing recommendations, and reporting an effectiveness conclusion for each risk.
• Strong knowledge of Cybersecurity processes and concepts, including:
  • Incident response
  • Secure software development
  • Security governance
  • Cloud computing
  • SDLC
  • Third-party risk management
  • Penetration testing
  • Vulnerability management
  • Disaster recovery
  • Segregation of duties
  • Audit logging
  • Physical security
  • Access management
  • Configuration management
• Experience conducting or supporting cybersecurity audits, security assessments, risk reviews, or compliance activities for a large or global organization.
• Excellent time-management skills.
• Ability to communicate issues, risks, and technical information clearly and professionally in English to technical and non-technical audiences.

Requirements

• 7+ years of professional experience in Information Technology, Cybersecurity, Technology Risk, IT Compliance (SOX, PCI DSS), ITGCs, Cloud Technologies, Security Operations, IAM, or related technology governance and assurance functions.
• A bachelor’s or master’s degree in information security, Information Systems, Computer Science, or a related field.
• One or more relevant professional certifications (e.g., CISA, CISM, CISSP, PCIP, Security+, CC, or equivalent).

Benefits

• A dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow.
• Thoughtfully designed Be Well programs to support your financial, mental, physical, and social health.
• Impactful work that powers the systems our customers rely on every day.
• Access to cutting-edge learning opportunities, including certifications with Microsoft, Google, and Amazon.
• Personalized development goals aligned with your ambitions.
• Continuous feedback to keep you inspired and on track.