ZipRecruiter

Log In

1

Cyber Auditor Jobs (NOW HIRING)

iNovex Information Systems

Cyber Auditor

Fairfax, VA · On-site

$117K - $147K/yr

The Cyber Auditor shall possess the following capabilities: * Monitors security tools, assesses threats, and risks involving client infrastructure. * Provides vulnerability scans, reports, and ...

RealmOne

Cyber Auditor

Fairfax, VA · On-site

They are seeking an experienced Cyber Auditor to provide technical expertise in support of a government client, focusing on maintaining the operational security posture for an enterprise IT program.

GDIT

IT and Cyber Risk Auditor

Falls Church, VA · Hybrid

$81K - $110K/yr

As an IT and Cyber Risk Auditor at GDIT, you will leverage your background managing RMF controls, system documentation, and continuous monitoring activities to deliver thorough, accurate, and ...

Goldbelt, Inc.

Defense Cyber Analyst

Honolulu, HI

$115K - $130K/yr

Knowledge of network and system monitoring/auditing tools. * Ability to analyze cyber vulnerability information and recommend mitigations. Minimum Qualifications: * Minimum 4 years of related ...

TekSynap

CSSP Auditor

Fort Belvoir, VA · On-site

The CSSP Auditor works across the Protect, Detect, Respond, and Sustain functions to ensure ... Manage and validate CSSP Evidence Objects to ensure all defensive cyber actions are fully ...

next page

Showing results 1-20

All JobsCyber Auditor Jobs

Cyber Auditor information

See salary details

$38.5K

$92.8K

$151K

How much do cyber auditor jobs pay per year?

As of Aug 12, 2026, the average yearly pay for cyber auditor in the United States is $92,797.00, according to ZipRecruiter salary data. Most workers in this role earn between $72,000.00 and $112,000.00 per year, depending on experience, location, and employer.

What is a cyber auditor?

A Cyber Auditor is a professional responsible for evaluating and assessing an organization's cybersecurity policies, procedures, and controls to ensure compliance with regulations and industry standards. They identify vulnerabilities, review security protocols, and recommend improvements to protect sensitive data and digital assets. Cyber Auditors often conduct regular audits, prepare detailed reports, and work closely with IT and management teams to enhance overall cybersecurity posture.

What are some typical challenges cyber auditors face when conducting audits, and how can these be addressed?

Cyber Auditors often encounter challenges such as rapidly evolving threats, incomplete documentation, and resistance to change from staff. To address these issues, auditors should stay current with cybersecurity trends, maintain strong communication with IT teams, and use standardized frameworks like NIST or ISO 27001. Building collaborative relationships with stakeholders and promoting a culture of security awareness can also help overcome resistance and ensure successful audits.

What are the key skills and qualifications needed to thrive as a cyber auditor?

To thrive as a Cyber Auditor, you need a strong understanding of cybersecurity frameworks, risk management, and auditing principles, often supported by a degree in information security or related fields and certifications like CISA or CISSP. Familiarity with tools such as vulnerability scanners, SIEM systems, and compliance management software is essential. Strong analytical thinking, attention to detail, and effective communication skills help in identifying risks and conveying findings to stakeholders. These skills and qualifications are crucial for ensuring organizations maintain robust security postures and comply with regulatory requirements.

What is the difference between Cyber Auditor vs Cyber Security Analyst?

AspectCyber AuditorCyber Security Analyst
CertificationsISO 27001 Lead Auditor, CISACompTIA Security+, CISSP
Work EnvironmentAudit firms, corporate compliance teamsSecurity operations centers, IT departments
Employer & IndustryFinancial, healthcare, governmentAny industry with IT infrastructure
Primary FocusAssessing compliance, evaluating controlsMonitoring security, incident response

While both roles focus on cybersecurity, a Cyber Auditor primarily evaluates an organization's compliance and controls through audits, whereas a Cyber Security Analyst actively monitors and responds to security threats. Understanding these differences helps organizations assign the right professionals to their cybersecurity needs.

More about Cyber Auditor jobs
What cities are hiring for Cyber Auditor jobs? Cities with the most Cyber Auditor job openings:
What states have the most Cyber Auditor jobs? States with the most job openings for Cyber Auditor jobs include:
What job categories do people searching Cyber Auditor jobs look for? The top searched job categories for Cyber Auditor jobs are:
Cyber Auditor jobs near you
Infographic showing various Cyber Auditor job openings in the United States as of August 2026, with employment types broken down into 95% Full Time, 2% Part Time, and 3% Contract. Highlights an 89% Physical, 4% Hybrid, and 7% Remote job distribution, with an average salary of $92,797 per year, or $44.6 per hour.

Cyber Auditor

iNovex Information Systems

Fairfax, VA • On-site

$117K - $147K/yr

Full-time

Medical, Dental, Vision, Retirement, PTO

Re-posted 6 days ago

Job description

Job Brief
Cybersecurity
Job Description
RealmOne was built on the principle that people matter first and foremost. We believe in providing a strong work/life balance by investing in our employees and encouraging professional and personal growth. We do this by offering exceptional benefits, flexible schedules, and the tools necessary to achieve success through paid training, mentoring, and the opportunity to work alongside top-notch industry professionals. We are looking for skilled individuals to provide technical expertise in support of a government client.
We are seeking an experienced Cyber Auditor to join our technology-based program supporting a key government customer. As a Cyber Auditor, you will play a critical role in maintaining the operational security posture for an enterprise IT program.
The Cyber Auditor shall possess the following capabilities:
  • Monitors security tools, assesses threats, and risks involving client infrastructure.
  • Provides vulnerability scans, reports, and metrics to Security, Program, and Customer management.
  • Helps determine current risks, provides mitigations strategies, and communicates with system owners, data owners, and security management to ensure risks are appropriately identified and mitigated within operational schedules.
  • Follows standard operating procedures for detecting, classifying, and reporting incidents under the supervision of the SOC Manager and in partnership with Tier 3 SOC Analysts.

Qualifications:
  • Experience in vulnerability scanners, report generation, and effective communication with leadership is required.
  • Experience in technical writing, using Security and Incident Event Management (SIEM) technologies, Intrusion Detection/Prevention Systems (IDS/IPS), host-based intrusion detection systems (HIDS), network mapping, and Linux is preferred.
  • Must have (or complete within 90 days of hire) one of the following certifications: Security+, CEH, GCIA, CISSP or similar.
  • Candidate must have a total of 7 years of work experience. The experience can be a combination of degree and work history. This can be a High School degree and 7 years of work history OR an Associate's and 5 years, a Bachelors' and 5 years, a master's and 1 years or a PhD and 0 years of work history.

Position requires active Security Clearance with appropriate Polygraph
Pay Range: $117,257 - $147,257
The RealmOne pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Our approach to crafting offers considers various factors to establish an equitable and competitive compensation package. These considerations include, but are not limited to, the extent and intricacy of the role's responsibilities, the candidate's educational background, their work experience, and the specific competencies crucial for success in the role.
RealmOne Benefits:
  • Healthcare Coverage + Insurance: Medical: Three (3) rich healthcare options through CareFirst with 100% or majority company-paid premiums. Tax-advantaged health savings account available with generous employer contribution. Dental + Vision: 100% employer-paid for employees and family with buy-up option available.
  • Retirement + Savings: 401K - 10% TOTAL CONTRIBUTION - 5% safe harbor - 5% annual profit share. Immediate vested, no match required!
  • Paid Time Off + More: 4 weeks starting PTO - 11 federal holidays + 2 floating holidays - Paid hours for company-required training.
  • Career Growth + Development: Access to FREE 24/7 learning via Udemy - Opportunities to participate in tech councils, industry initiatives, etc. - $7,500 annual Educational & Professional Development Assistance.
  • MORE BENEFITS...FOR EVERY LIFESTYLE! - Paid parental leave - Adoption assistance - Annual swag drops - Flexible work schedules - -Generous referral bonus program - Employee appreciation + family-friendly corporate events ...and much more.

ABOUT US
  • RealmOne is a mid-sized science and technology company dedicated to solving our customers' toughest mission challenges.
  • Headquartered in Columbia, MD., RealmOne supplies advanced cybersecurity, data science and software engineering services and products to customers in the Government and commercial sectors.
  • RealmOne delivers encompassing mission assurance and critical systems support to government customers across various U.S. locations to include Colorado, Georgia, Hawaii, Texas, Utah, and Virginia.
  • RealmOne has earned numerous awards, including being named a Top Workplace by the Baltimore Sun. With more than 30+ active contracts, 12 of which are prime, RealmOne stands as a premier innovator supporting the Government and Department of Defense, with team members located nationwide.

Disclaimer: Benefits packages offered by RealmOne are subject to variation and may differ based on work location, clearance level, and other eligibility criteria. Specific eligibility, availability, and scope of benefits are not guaranteed, may differ from those generally described, and remain subject to modification at the sole discretion of the company.

Apply