1

It Security Auditor Jobs (NOW HIRING)

Senior Full Stack Application Development Security Auditor who is passionate about designing and building secure platforms and applications through Dynamic, Static, and Software Composition Analysis ...

IT Security Auditor

Dimondale, MI ยท On-site

$59 - $74/hr

Senior Full Stack Application Development Security Auditor who is passionate about designing and building secure platforms and applications through Dynamic, Static and Software Composition Analysis ...

Senior Full Stack Application Development Security Auditor who is passionate about designing and building secure platforms and applications through Dynamic, Static and Software Composition Analysis ...

IT Security Auditor

Dimondale, MI ยท On-site

$125 - $150/hr

Country United States Senior Full Stack Application Development Security Auditor who is passionate about designing and building secure platforms and applications through Dynamic, Static and Software ...

DESCRIPTION OF SERVICES Responsibilities may include, but are not limited to: 1. Plan, execute, and report on IT and cybersecurity audits to assess the effectiveness of security controls, risk ...

IT Security Auditor #1063766

Dimondale, MI ยท On-site

$125 - $150/hr

Dimondale, Michigan IT Security Auditor #1063766 Short Senior Full Stack Application Development Security Auditor who is passionate about designing and building secure platforms and applications ...

New

SIMILAR CAREER TITLES Information Security Auditor, IT Security Auditor, Cybersecurity Auditor, Compliance Analyst, Risk Assessment Specialist, Security Risk Auditor, Internal IT Auditor, Information ...

SIMILAR CAREER TITLES Information Security Auditor, IT Security Auditor, Cybersecurity Auditor, Compliance Analyst, Risk Assessment Specialist, Security Risk Auditor, Internal IT Auditor, Information ...

System Security Auditor

Honolulu, HI ยท On-site

$100 - $125/hr

Information Security Auditor * IT Security Auditor * Cybersecurity Auditor * Compliance Analyst * Risk Assessment Specialist * Security Risk Auditor * Internal IT Auditor * Information Assurance ...

System Security Auditor

Chantilly, VA ยท On-site

$125 - $150/hr

SIMILAR CAREER TITLES Information Security Auditor, IT Security Auditor, Cybersecurity Auditor, Compliance Analyst, Risk Assessment Specialist, Security Risk Auditor, Internal IT Auditor, Information ...

SIMILAR CAREER TITLES Information Security Auditor, IT Security Auditor, Cybersecurity Auditor, Compliance Analyst, Risk Assessment Specialist, Security Risk Auditor, Internal IT Auditor, Information ...

SIMILAR CAREER TITLES Information Security Auditor, IT Security Auditor, Cybersecurity Auditor, Compliance Analyst, Risk Assessment Specialist, Security Risk Auditor, Internal IT Auditor, Information ...

SIMILAR CAREER TITLES Information Security Auditor, IT Security Auditor, Cybersecurity Auditor, Compliance Analyst, Risk Assessment Specialist, Security Risk Auditor, Internal IT Auditor, Information ...

SIMILAR CAREER TITLES Information Security Auditor, IT Security Auditor, Cybersecurity Auditor, Compliance Analyst, Risk Assessment Specialist, Security Risk Auditor, Internal IT Auditor, Information ...

System Security Auditor

Reston, VA ยท On-site

$100 - $125/hr

SIMILAR CAREER TITLES Information Security Auditor, IT Security Auditor, Cybersecurity Auditor, Compliance Analyst, Risk Assessment Specialist, Security Risk Auditor, Internal IT Auditor, Information ...

SIMILAR CAREER TITLES Information Security Auditor, IT Security Auditor, Cybersecurity Auditor, Compliance Analyst, Risk Assessment Specialist, Security Risk Auditor, Internal IT Auditor, Information ...

Showing results 21-40

It Security Auditor information

See salary details

$11K

$90K

$140.5K

How much do it security auditor jobs pay per year?

As of Sep 9, 2026, the average yearly pay for it security auditor in the United States is $89,997.00, according to ZipRecruiter salary data. Most workers in this role earn between $48,000.00 and $130,000.00 per year, depending on experience, location, and employer.

What does an IT Security Auditor do?

An IT Security Auditor is responsible for evaluating and testing an organization's information technology systems, policies, and procedures to ensure they are secure and compliant with industry standards and regulations. They identify vulnerabilities, assess potential risks, and recommend improvements to protect data and maintain cybersecurity. IT Security Auditors may also prepare reports, conduct interviews, and review documentation as part of their assessments.

What are the key skills and qualifications needed to thrive as an IT Security Auditor, and why are they important?

To thrive as an IT Security Auditor, you need a solid understanding of information security principles, risk assessment, and compliance frameworks, often supported by a degree in computer science or related fields and certifications such as CISA, CISSP, or CISM. Familiarity with auditing tools, vulnerability assessment software, and knowledge of regulatory standards like ISO 27001 or NIST is typically required. Strong analytical thinking, attention to detail, and effective communication skills help auditors identify threats and clearly report findings to stakeholders. These abilities are crucial to ensure organizations maintain robust security postures and meet compliance requirements.

What are some typical challenges IT Security Auditors face when working with cross-functional teams?

IT Security Auditors often collaborate with departments such as IT, compliance, and operations to assess and improve security controls. A common challenge is bridging communication gaps between technical and non-technical staff, ensuring audit findings are clearly understood and actionable. Additionally, auditors may encounter resistance to change or difficulties in obtaining timely documentation, requiring strong interpersonal and project management skills. Building trust and maintaining objectivity are essential for facilitating cooperation and driving effective security improvements.

What is the difference between It Security Auditor vs Network Security Analyst?

AspectIt Security AuditorNetwork Security Analyst
CertificationsCISA, CISSPCISSP, CompTIA Security+
Work EnvironmentAudit firms, corporate compliance teamsIT departments, security operations centers
Primary FocusAssessing security policies, compliance, and controlsMonitoring network traffic, identifying vulnerabilities
Employer & Industry UsageFinancial, healthcare, governmentTech companies, ISPs, large enterprises

While both roles focus on cybersecurity, an It Security Auditor primarily evaluates security policies and compliance through audits, whereas a Network Security Analyst actively monitors and protects network infrastructure. Both roles require similar certifications and are vital in maintaining organizational security.

More about It Security Auditor jobs

What cities are hiring for It Security Auditor jobs?

Cities with the most It Security Auditor job openings:

What states have the most It Security Auditor jobs?

States with the most job openings for It Security Auditor jobs include:

What are popular job titles related to It Security Auditor jobs?

For It Security Auditor jobs, the most frequently searched job titles are:

Infographic showing various It Security Auditor job openings in the United States as of September 2026, with employment types broken down into 85% Full Time, 13% Part Time, and 2% Contract. Highlights an 90% Physical, 2% Hybrid, and 8% Remote job distribution, with an average salary of $89,997 per year, or $43.3 per hour.

IT Security Auditor

Lansing, MI โ€ข On-site

Stafford Gray
1 - 10 employees

Contractor

Posted 5 days ago


Job description

Senior Full Stack Application Development Security Auditor who is passionate about designing and building secure platforms and applications through Dynamic, Static, and Software Composition Analysis assessments. This position is not a member of the Security Operations Center - rather, it is dedicated to working with software development teams on secure coding practices. The ideal candidate will feel comfortable working with front-end, back-end, and cloud-based application developers.
Partnering with distributed teams, this role helps transform the way systems are built, secured, authorized, and operated for continuous compliance and risk mitigation. The candidate will help lead efforts to implement security patterns and practices with orchestration and automation tools that automate secure configuration, verification, compliance, and authorization of systems and their development - serving as a key contributor to maturing the organization's secure software development practices.
Functional Knowledge:
  • Chrome/Firefox/Edge developer tools for inspecting request/response headers
  • Experience with Application Security scanning tools (SAST, DAST, SCA, ASOC, Container/Cloud) - required
  • Experience with Coverity, BlackDuck, SRM, or Fortify - a plus
  • HTTP request/response headers for web and RESTful API calls
  • Ability to explain in detail any of the OWASP Top 10 vulnerabilities (Cross-Site Scripting, Injection attacks, SSRF, CSRF, XML entity, etc.)
  • API security, JWT, OAuth/OIDC/PKCE
  • Web and API replay attacks
  • High-level understanding of containers
  • Cloud development experience (Azure, AWS, GCP)

Requirements
Minimum Qualifications:
  • 5+ years of total IT-related experience
  • 3+ years implementing/utilizing Federal, Industry, and Open-Source Security Guidance and Secure Coding Practices (OWASP Top 10, SANS, CERT, CWE Top 25, Critical Security Controls, Cloud Security Alliance, SafeCode, etc.)
  • 3+ years with compiled and interpreted languages such as Angular, React, Node.js, Java, Spring Boot, IBM WebSphere, Oracle JBoss, or .NET stacks
  • 3+ years with networking, infrastructure, secure application development, and security automation (DevSecOps)
  • 3+ years of hands-on experience building and deploying secure, complex distributed web and mobile applications
  • Must be located within 90-100 miles of Dimondale, MI at time of submission (local candidates only - hard requirement)
  • Must be able to pass a CJIS background check