Careers with CyberMaxx

A Compliance & Cybersecurity Auditor working with clients for various types of audits, assessments, writing, knowledge of information protection, compliance, and privacy industry practices and requirements. Ability to work independently or with a team to complete engagements defined by client goals.

The person that takes this role will need to deeply understand administrative, technical, and physical information protection, compliance, and privacy requirements while maintaining client satisfaction, participate in projects through a standard assessment project life cycle and deliver on time, and possess effective communication skills with clients and other internal team members

• Execute NIST, CIS, ISO, HIPAA, and other standard gap and risk assessments, as requested by clients.
• Based on past knowledge and experience, be able to perform client discussions and interviews to better understand the client environment and implementation of controls.
• Effective written communication. Writing and presenting are a large part of deliverables to clients.
• Work based on risk-focused assessments for IT systems.
• Assess the exposures resulting from ineffective or missing control practices.
• Weigh the relevancy, accuracy, and perspective of conclusions against audit evidence.
• Work with management to ensure security recommendations comply with company procedure and industry controls.
• Collaborate with internal and client departments to improve security compliance, manage risk, and bolster effectiveness.
• Interface with clients and staff with professionalism. A variety of problems will arise and will be dealt with, but senior staff will be expected to pro-actively construct solutions. 

• CISSP or CISA or CISM required.
• PCI QSA or ISA certification REQUIRED
• 4+ years of hands-on experience with performing interviews and audit testing.
• Knowledge of NIST frameworks and requirements, CIS requirements, ISO 27001, and HIPAA requirements, including privacy.
• Ability to occasionally travel. Our team’s workload is predominately remote but for occasional onsite requirements senior staff needs to be able to travel to client locations and maintain a good image for the company and team.
• Advanced experience with enterprise information protection, audit, compliance, and privacy programs. Must be strong at working independently and self-motivated.
• Rich experience in speaking and working with clients both remote and onsite.
• Capable of managing multiple projects at once.
• Proficient with Microsoft Word, Excel, and PowerPoint.