> Markdown version of [/jobs/ext/4303153-it-security-specialist-i](https://www.wearedevelopers.com/jobs/ext/4303153-it-security-specialist-i). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Specialist I - **Company:** OpTech LLC - **Location:** United States - **Experience:** Expert - **Contract:** Contract - **Skills:** Control Objectives for Information and Related Technology (COBIT), Cyber Security, Databases, Information Technology Audit, Smartsuite, IT General Controls (ITGC), National Institute of Standards and Technology Cybersecurity Framework - **Published:** October 13, 2026 - **Apply:** https://www.dice.com/job-detail/26cda690-d412-4258-87ed-bb5841df4d65 ## About the Role We are seeking an IT Security Specialist I to support IT compliance, security governance, risk assessments, and audit activities. The ideal candidate will have at least 5 years of IT compliance, assessment, or audit experience, with strong communication skills and knowledge of HITRUST CSF and other security frameworks., * 5+ years of IT compliance, IT assessment, or IT audit experience. * Knowledge of GRC principles and security frameworks, including HITRUST CSF, NIST CSF, ISO 27001, or COBIT. * Experience testing IT controls across systems, applications, databases, and operating systems. * Experience coordinating the audit lifecycle and managing audit evidence. * Strong written and verbal communication skills. Preferred Qualifications * Bachelor's or master's degree in a related field. * Certifications such as CISSP, CISA, CISM, CPA/CA, or equivalent. ## Description * Evaluate IT controls and compliance against HITRUST CSF. * Interview SMEs, review evidence, and perform control testing. * Identify risks, analyze root causes, and recommend improvements. * Coordinate audits, evidence collection, remediation tracking, and auditor communications. * Prepare compliance reports, dashboards, metrics, and KPIs. * Use GRC tools to manage assessments and remediation plans. * Collaborate with internal stakeholders to support compliance and audit readiness.