ZipRecruiter

Log In

1

Information Security Audit Jobs (NOW HIRING)

Techvilla Solutions

Experience performing security risk assessments, audits, control reviews, and compliance ... Strong knowledge of information security policies, risk management, internal controls, and audit ...

Techvilla Solutions

Experience performing security risk assessments, audits, control reviews, and compliance ... Strong knowledge of information security policies, risk management, internal controls, and audit ...

Techvilla Solutions

Experience performing security risk assessments, audits, control reviews, and compliance ... Strong knowledge of information security policies, risk management, internal controls, and audit ...

Techvilla Solutions

Experience performing security risk assessments, audits, control reviews, and compliance ... Strong knowledge of information security policies, risk management, internal controls, and audit ...

Techvilla Solutions

Experience performing security risk assessments, audits, control reviews, and compliance ... Strong knowledge of information security policies, risk management, internal controls, and audit ...

Techvilla Solutions

Experience performing security risk assessments, audits, control reviews, and compliance ... Strong knowledge of information security policies, risk management, internal controls, and audit ...

Techvilla Solutions

Experience performing security risk assessments, audits, control reviews, and compliance ... Strong knowledge of information security policies, risk management, internal controls, and audit ...

next page

Showing results 1-20

All JobsTechnology JobsInformation Technology JobsTechnology Administrator JobsInformation Security Audit Jobs

Information Security Audit information

See salary details

$62.5K

$136.1K

$200K

How much do information security audit jobs pay per year?

As of Sep 11, 2026, the average yearly pay for information security audit in the United States is $136,104.00, according to ZipRecruiter salary data. Most workers in this role earn between $110,500.00 and $160,500.00 per year, depending on experience, location, and employer.

What is the difference between Information Security Audit vs Penetration Tester?

AspectInformation Security AuditPenetration Tester
CertificationsISO 27001 Lead Auditor, CISAOSCP, CEH
Work EnvironmentAudit reports, compliance assessments, office settingsSimulated attacks, testing networks and systems
Employer & IndustryOrganizations seeking compliance, consulting firmsSecurity firms, IT departments, consulting

While both roles focus on security, an Information Security Auditor assesses an organization's security policies and compliance, whereas a Penetration Tester actively tests systems for vulnerabilities. The audit provides a broad overview of security posture, while penetration testing identifies specific weaknesses. Both roles require relevant certifications and are vital for comprehensive cybersecurity strategies.

What does an information security audit do?

An information security audit is a process where a professional evaluates an organization's security controls, policies, and procedures to identify vulnerabilities and ensure compliance with standards like ISO 27001 or NIST. It involves reviewing systems, networks, and data protection measures to assess their effectiveness and recommend improvements.

What cities are hiring for Information Security Audit jobs?

Cities with the most Information Security Audit job openings:

What states have the most Information Security Audit jobs?

States with the most job openings for Information Security Audit jobs include:

What are popular job titles related to Information Security Audit jobs?

For Information Security Audit jobs, the most frequently searched job titles are:

Infographic showing various Information Security Audit job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 73% Full Time, 23% Part Time, and 3% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $136,104 per year, or $65.4 per hour.

VP IT Information Security & Audit

Columbus, OH • On-site

The Marzetti Company
1 - 5K employees
Learn more about The Marzetti Companyexternal

$151K - $189K/yr

Other

Re-posted 29 days ago

Job description

Vice President Information Security & Audit

The Vice President Information Security & Audit is a senior IT leadership role responsible for protecting the company's information assets, technology platforms, and digital operations. This role provides strategic direction, governance, and operational oversight for enterprise cybersecurity, information security, data privacy, and IT audit functions.

As a member of the IT Leadership Team, this role partners closely with business and technology leaders to enable growth, innovation, and operational excellence while managing cyber risk in an always-on manufacturing environment.

Our company enjoys a modern technology stack, including SAP HANA on Microsoft Azure for ERP and Microsoft-based platforms for data, analytics, collaboration, and security.

Cybersecurity & Information Security
  • Define and execute the enterprise cybersecurity and information security strategy aligned with business objectives and risk tolerance.
  • Protect enterprise systems, networks, applications, cloud platforms, and operational technology (OT) environments from cyber threats.
  • Oversee security architecture and controls for SAP on Azure and Microsoft-based data and analytics platforms.
  • Lead threat detection, incident response, vulnerability management, and security operations, leveraging internal capabilities and third-party partners.
  • Establish and maintain security standards, policies, procedures, and technical controls across the enterprise.
  • Partner with Infrastructure, Applications, Data & Analytics, and OT teams to embed security into system design and operations.
Privacy & Data Protection
  • Own the enterprise privacy and data protection program, ensuring compliance with applicable privacy and data protection laws and regulations.
  • Develop and maintain policies and processes for data classification, data handling, retention, and protection.
  • Partner with Legal, HR, and business leaders to manage privacy risk related to customer, consumer, employee, and supplier data.
  • Oversee privacy risk assessments, third-party privacy reviews, and incident response related to data privacy events.
IT Audit, Risk & Compliance
  • Lead the IT controls and audit function, including internal IT audits, controls testing, and coordination with internal and external auditors.
  • Ensure the effectiveness of IT general controls (ITGCs) supporting financial reporting, operational resilience, and regulatory compliance.
  • Own and employ technology risk management practices, including risk assessments, remediation tracking, and executive reporting.
  • Support enterprise risk management (ERM) initiatives by providing cybersecurity and technology risk insights.
Leadership & Organization Management
  • Lead and develop a high-performing team across cybersecurity, information security, privacy, and IT audit disciplines.
  • Manage a hybrid delivery model with several security and audit functions provided by trusted third-party partners.
  • Set clear goals, performance expectations, and development plans for team members.
  • Manage departmental budgets, vendor relationships, and service-level expectations.
Strategy, Governance & Executive Partnership
  • Serve as a trusted advisor to the CIO and IT leadership team on cybersecurity, privacy, and technology risk matters.
  • Regularly report on cybersecurity posture, risk levels, incidents, and compliance status to executive leadership.
  • Establish and maintain governance forums, metrics, and dashboards to support informed decision-making.
  • Stay current on emerging threats, regulatory changes, and industry best practices relevant to food manufacturing and global supply chains.

Qualifications ? What You'll Bring

  • Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; or equivalent experience.
  • 15+ years of progressive experience in cybersecurity, information security, IT risk, or audit roles.
  • Proven experience leading enterprise security programs in complex, regulated environments.
  • Strong understanding of cloud security, particularly Microsoft Azure and SAP landscapes.
  • Experience managing third-party security providers, MSSPs, and audit partners.
  • Demonstrated ability to communicate complex technical and risk concepts to executive and business audiences.

Preferred:

  • Advanced degree (MBA, MS in Cybersecurity, or similar).
  • Relevant certifications such as CISSP, CISM, CISA, CRISC, or equivalent.
  • Experience in manufacturing, food & beverage, consumer packaged goods, or industrial environments.
  • Familiarity with OT/ICS security and plant-floor technology risks.
  • Exposure to AI use cases related to IS

Working Conditions/Environment

  • Occasional travel to corporate offices, manufacturing locations, and key vendors as needed.

Apply