Cybersecurity & IT Audit Controls Analyst

Title: Cybersecurity & Audit Controls Analyst

Location : Hybrid near Naperville, Illinois

Type: Contract to hire

Targeted Rate : $50/hr

Our client near Naperville, Illinois is seeking a Cybersecurity & Audit Controls Analyst to join their team on a contract to hire basis! This position will be 50% Cybersecurity Operations and 50% IT Audit Controls.

Security Operations (50%)

Incident Response

• Investigate suspicious emails and phishing attempts.
• Perform user interviews and determine extent of compromise.
• Analyze endpoint activity and email logs.
• Escalate major incidents to infrastructure teams when required.
• Document findings and maintain incident logs.

Security Monitoring

• Review security logs and alerts daily.
• Monitor and investigate suspicious activity.
• Respond to user-reported incidents.
• Validate and triage events.

Vulnerability Management

• Manage monthly vulnerability assessments.
• Coordinate remediation efforts.
• Ensure findings are tracked through closure.

Security Tool Administration

Current environment includes:

• Mimecast
• Forcepoint
• Zscaler (ZIA/ZPA)
• CrowdStrike EDR
• CrowdStrike Falcon Complete MDR
• KnowBe4

IT Controls / Audit / Change Management (50%)

• Coordinate annual IT audits.
• Support evidence gathering activities.
• Work cross-functionally with business units.
• Interpret audit questionnaires and requirements.
• Maintain IT controls and documentation.
• Support change management initiatives.
• Partner with leadership on complex audit responses.

Audit activity is expected annually, with additional governance activity driven by private equity ownership and cyber insurance requirements.

Required Qualifications

• 5+ years of IT and/or cybersecurity experience.
• Previous ownership or lead participation in at least one IT audit.
• Hands-on security operations experience.
• Experience investigating security incidents.
• Strong understanding of infrastructure, authentication, and logging.
• Experience with vulnerability management.
• Ability to work independently and know when to escalate.
• Strong documentation and communication skills.

Preferred Technical Experience

Security Platforms:

• CrowdStrike EDR
• CrowdStrike Falcon Complete
• Mimecast
• Zscaler
• Forcepoint
• KnowBe4

Additional Experience:

• Incident response
• Log analysis
• Vulnerability remediation
• Endpoint security
• Email security
• Audit coordination
• Change management
• IT controls

Soft Skills

• Initiative
• Curiosity
• Strong communication skills
• Ability to collaborate across teams
• Documentation mindset
• Problem-solving mentality
• Long-term career mindset

This position is eligible for Medical, Dental, Vision