IT Auditor

Required Skills & Experience • \tNetwork security knowledge: Understanding of firewalls, intrusion detection/prevention systems (IDS/IPS), encryption protocols, and access controls.\n•\tEDI expertise: Familiarity with EDI standards (e.g., X12, EDIFACT), communication protocols (e.g., AS2, FTP), and data mapping.\n•\tAudit methodologies: Knowledge of risk assessment frameworks, control testing techniques, and audit reporting standards.\n•\tRegulatory compliance: Awareness of relevant industry regulations (e.g., HIPAA, PCI DSS) that may impact network security and EDI. Job Description 1.\tDefine Scope: Clearly outline the systems, processes, and data included in the audit.\n2.\tRisk Assessment: Identify potential risks to network security and EDI, such as unauthorized access, data breaches, system failures, and compliance violations.\n3.\tControl Identification: Determine the existing security controls in place to mitigate the identified risks.\n4.\tControl Testing: Design and execute tests to evaluate the effectiveness of the controls (e.g., reviewing configurations, analyzing logs, conducting vulnerability scans).\n5.\tReporting: Document the audit findings, including any weaknesses or vulnerabilities discovered, and provide recommendations for improvement.\n6.\tFollow-Up: Track the implementation of the recommendations and conduct periodic re-assessments to ensure ongoing compliance. Insight Global