Audit Liason - Hybrid

Job Summary:
The IT Audit Liaison will support the Enterprise Information Security Office (EISO) and Governance, Risk & Compliance (GRC) Department with internal and external IT audits, compliance assessments, control evaluations, and remediation activities.

Key Responsibilities:

• Support IT audits and regulatory reviews, including GAAP/Single Audit, PA Auditor General, Attorney General, and Bureau of Audits.
• Review technical evidence and documentation for compliance with laws, policies, regulations, and security standards.
• Evaluate IT controls using NIST CSF, NIST 800-53, ISO 27001, and Commonwealth security policies.
• Identify control gaps, document findings, and recommend corrective actions.
• Support audit responses, evidence collection, remediation tracking, and risk reporting.
• Develop/maintain automated compliance and audit workstreams.
• Create dashboards, metrics, and executive reports on audit and compliance status.
• Perform risk-based assessments and support governance, risk management, and internal control initiatives.

Required/Desired Skills:

• IT auditing and cybersecurity governance/risk management
• NIST CSF, NIST 800-53, ISO 27001
• IT controls, compliance, and risk assessments
• Audit documentation, evidence collection, and remediation
• Dashboards, metrics, and executive reporting
• Strong analytical and communication skills

Preferred: CISA, CRISC, CISM, or equivalent certification; experience with IT audits, regulatory examinations, or compliance assessments.