IT Security Auditor

IT Auditor Level 1 to support cybersecurity and risk management efforts critical to serving the people of Texas. The selected candidate will work as part of the Information Technology team, performing audits, analyzing controls, and mitigating security risks across TWC's technology infrastructure.

All work products created in this role are considered property of TWC. The candidate must meet ITSAC IT Auditor Level 1 qualifications and adhere to TWC's guidelines.

• Conduct cybersecurity analysis to identify vulnerabilities and threats within TWC's network environment.

• Evaluate internal controls and risks in technology systems and cloud-based infrastructure.

• Create and implement action plans to prevent security breaches and reduce risks.

• Perform advanced systems analysis while supporting multiple projects concurrently.

• Execute risk assessments, define audit procedures, and review client processes to ensure compliance and security.

• Document findings clearly and concisely, supporting audits with organized and thorough reports.

• Communicate audit results to management through written reports and oral presentations.

• Assist in maintaining good client relations and ensure that audit expectations are met.

• Monitor engagement administration tasks, including hours tracking and budgeting.

• Support operational activities by performing other assigned duties as needed.

• Experience: 1 3 years in executing major audit components related to cybersecurity, cloud infrastructure, risk management, applications, and third-party services.

• Risk Assessment: Experience assessing technology operations and business units for threats and vulnerabilities.

• Control Evaluation: Ability to design and execute audit procedures to verify controls, analyze evidence, and document client processes.

• Communication: Experience communicating audit findings to clients, management, and team members.

• Documentation: Ability to prepare clear, organized, and comprehensive audit reports.

• Client Relations: Establish and maintain positive working relationships with clients during engagements.

• Problem-solving: Understanding broader business risks, including financial, legal, and reputational implications.

• Time Management: Self-prioritize and plan work activities, managing multiple tasks and priorities.

• Engagement Administration: Track hours, budgets, and deliverables across multiple audit projects.

• Self-motivated and proactive, with the ability to work independently.

• Experience conducting system-level risk assessments, including evaluating likelihood and impact of security breaches.

• Familiarity with developing and maintaining System Security Plans (SSPs).

• Experience managing multiple compliance and risk deliverables, tracking updates and documentation throughout audit cycles.