> Markdown version of [/jobs/ext/4505945-vendor-cybersecurity-auditor-2945](https://www.wearedevelopers.com/jobs/ext/4505945-vendor-cybersecurity-auditor-2945). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Vendor Cybersecurity Auditor #2945

- **Company:** Genius Road
- **Location:** Austin, TX, United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cyber Security, System Configuration, Identity and Access Management, Information Technology Audit, Internet Security, Network Security, PCI Data Security Standards
- **Published:** November 2, 2026
- **Apply:** https://www.careerbuilder.com/job-details/vendor-cybersecurity-auditor-2945-austin-tx--1883cebf-252a-406c-848d-2bf24c30f7b4

## About the Role

Vendor/Supplier Evaluation, Internet Security, Auditing, Risk, Auditing, Vendor/Supplier Evaluation, Analysis Skills, Internet Security, Legal, Contract Requirements, Vendor Cybersecurity AuditorLocation: Austin, Texas (onsite and telework - must live locally)Project Length: 3-6+monthsAbout the RoleWe are seeking a Vendor Cybersecurity Auditor to assess and ensure the security and compliance of our third-party vendors. In this role, you will evaluate cybersecurity controls, identify gaps, and ensure vendors meet their contractual obligations related to IT and security standards.This is a critical position that plays a key role in protecting organizational data and managing third-party risk - ideal for someone who thrives in detail-driven environments, values evidence-based analysis, and is confident in interfacing with both technical and legal stakeholders.Minimum Qualifications

 * 5+ years of experience auditing cybersecurity controls against NIST, ISO 27001, SOC 2, or PCI-DSS frameworks.
 * 5+ years of technical IT auditing experience, including assessment of network security, identity access management, endpoint protection, and incident response.
 * Strong experience creating audit documentation and presenting findings to executives, legal, and technical teams.
 * Demonstrated investigative and analytical skills in identifying risk and security gaps.
 * 4+ years of experience in third-party/vendor cybersecurity risk assessments and audits.
 * 3+ years reviewing security policies and documentation for completeness and accuracy.
 * Experience auditing cloud-hosted environments (AWS, Azure, or GCP) and understanding of shared responsibility models
 * Familiarity with vendor incident response plans and breach assessments.
 * Ability to interpret contracts and ensure alignment with SLAs and cybersecurity requirements.
 * Experience auditing vendors in a government or regulated industry (e.g., courts, justice systems).
 * Proven ability to present complex findings to executive or legal audiences.
 * At least one relevant certification: CISA, CISSP, CRISC, or ISO 27001 Lead Auditor.

## Description

* Review vendor contracts, SLAs, and cybersecurity-related requirements for compliance with contractual obligations.
 * Evaluate vendor security controls against contractual terms and recognized industry standards (e.g., NIST, ISO 27001, SOC 2, PCI-DSS).
 * Analyze documentation and technical evidence including system configurations, access logs, and security policies.
 * Conduct interviews with vendor personnel to assess their security practices and governance maturity.
 * Perform sampling and control testing of administrative and technical safeguards.
 * Identify control deficiencies and assess associated risks to the organization.
 * Draft clear, professional audit reports summarizing findings, risks, and recommended remediations.
 * Track remediation efforts and validate closure of findings.
 * Collaborate with internal teams to ensure vendor risks are appropriately managed and escalated.

Why Join

 * Contribute to an organization committed to data protection and vendor governance.
 * Work in a supportive and collaborative environment with high visibility.
 * Be part of a forward-looking cybersecurity team that values transparency and accountability.
 * Opportunities for professional growth and continued learning.