IT Security Auditor

Diplomatic Technology (DT). DT provides enterprise architecture design, engineering, operations and maintenance support services for desktops, servers, networks, firewalls, and enterprise applications across the Department.

The IT Security Auditor will evaluate the organization's next generation information technology infrastructure, policies, and operations to ensure they are secure, efficient, and compliant with regulatory standards. This role will methodically review controls, documentation, and processes against established frameworks. This position requires extensive foreign and domestic travel to DOS posts located worldwide (75%).

Description of Duties:

• System Evaluations: Conducting comprehensive reviews of IT infrastructure, including networks, software, and hardware, to identify vulnerabilities.
• Compliance Auditing: Ensuring the organization adheres to legal and industry-specific regulations such as GDPR, HIPAA, SOX, and PCI DSS.
• Control Testing: Verifying the effectiveness of internal security measures like firewalls, routers/switches, encryption, and user access controls.
• Reporting & Recommendations: Preparing detailed written reports for senior management that explain technical risks in plain language and propose actionable solutions.
• Risk Assessment: Analyzing data to prioritize security risks based on their potential impact and likelihood.
• Post-Breach Investigation: Participating in or leading follow-up investigations after security incidents to determine how they occurred.