> Markdown version of [/jobs/ext/1895827-information-security-analyst-it-auditor](https://www.wearedevelopers.com/jobs/ext/1895827-information-security-analyst-it-auditor). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Analyst / IT Auditor - **Company:** HITRUST - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Unix, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Disaster Recovery, Information Technology Audit, Windows Servers, IT General Controls (ITGC) - **Published:** August 1, 2026 - **Apply:** https://recruiting.paylocity.com/Recruiting/Jobs/Apply/4382959 ## About the Role We are looking for a strong communicator to work with our assessors in a straightforward manner. This job is not about rubber stamping the product but rather ensuring quality. If you enjoy working in a structured environment and you have an analytical mindset, this could be the perfect match. The ideal candidate will have a background in public accounting IT audit and will be able to demonstrate IT security or security assessment experience., * This position requires 3 to 7 years of experience performing and reviewing IT audits, such as Infrastructure Audits, IT Security Reviews, IT general controls reviews, SOC 2 reports, etc. * Strong knowledge of security risk management, analysis and assessment concepts and their application * Strong knowledge of technology platforms (i.e., UNIX, Windows Server, AWS, etc.), networks, and infrastructure * Good understanding of AI security concepts, risks, governance, and controls * Good understanding of Business Continuity and Disaster Recovery (BC/DR) concepts * Must be technically proficient in performing assigned duties at a solid level of independence under minimal supervision while working within a team environment * Ability to manage multiple assessments simultaneously and adapt to shifting priorities * Strong analytical skills are required; you must be very detail-oriented with an ability to develop and apply complex concepts * Interpersonal project management skills; ability to organize and track project tasks * Bachelor's degree or equivalent work experience, * Public accounting experience in an IT audit role * Familiarity with the HITRUST CSF or another security framework methodology, such as NIST, ISO, COBIT, ITIL, etc. * HITRUST certifications, including Certified CSF Practitioner (CCSFP) and Certified HITRUST Quality Professional (CHQP) * CISA, HCISPP, CISM, CIA, CISSP, or similar certification ## Related Videos - [This Is Not Your Father's .NET](https://www.wearedevelopers.com/videos/967-this-is-not-your-father-s-net) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Introducing Digital Samba Embedded Video Conferencing API MCP Server](https://www.wearedevelopers.com/videos/1640-introducing-digital-samba-embedded-video-conferencing-api-mcp-server) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges) - [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)