Internal IT Auditor

• Audit system configurations, cloud architectures (OCI/AWS/Azure), operating systems, and network parameters to ensure continuous alignment with ISO 27001:2022 and internal security manuals
• Perform routine internal audits of the Cardholder Data Environment (CDE) as an Internal Security Assessor (ISA)
• Maintain data flow and network segmentation diagrams, review daily security logs, and validate network boundaries
• Verify active technical controls: audit Multi-Factor Authentication (MFA) enforcement, Role-Based Access Control (RBAC) consistency, vulnerability patch cycles, and endpoint protection rules
• Evaluate specialized identity verification controls, including biometric hardware and enrollment software workflows
• Maintain a unified technical control crosswalk mapping system security configurations simultaneously to PCI DSS controls and ISO 27002 clauses
• Extract and interpret evidence straight from technical systems (SIEM logs, firewall rulesets, encryption keys, and pipeline vulnerability scans)

Qualifications & Experience:

• Bachelor's degree in IT, Computer Science, Cybersecurity, or an equivalent technical field
• 4+ years of demonstrable experience auditing IT systems, verifying infrastructure security, or supporting an active corporate ISMS
• Information security certifications highly valued: active or prior PCI ISA or QSA designation; ISO 27001 Internal Auditor / Lead Auditor; CompTIA Security+, CISA or CEH

Skills & Competencies:

• Deep technical knowledge of cloud architectures, networking, and security controls
• Hands-on log analysis and evidence-gathering skills
• Strong documentation and cross-framework mapping ability