IT Auditor

To support compliance initiatives, the full-time salaried IT Auditor will maintain and advance information security compliance across PCI DSS, SOC 2 Type 2, and GovRAMP while working remotely within the continental United States. Key responsibilities Own day-to-day compliance execution for PCI DSS, SOC 2 Type 2, and GovRAMP, including audit preparation and remediation tracking Conduct internal audits and control assessments, producing formal reports with findings and prioritized recommendations for improvement Partner with all departments to educate staff on compliance requirements and hold department heads accountable to their compliance obligations Required qualifications 4-6 years of experience in IT audit, information security compliance, or GRC, ideally across multiple frameworks (PCI DSS, SOC 2, GovRAMP/FedRAMP) GovRAMP or FedRAMP experience strongly preferred Familiarity with NIST 800-53 controls and their application to GovRAMP/FedRAMP authorization Security certification such as CISA, CISSP, or CISM (CISA preferred) Bachelor's degree in Information Systems, Computer Science, Business, or related field, or equivalent experience