IT Auditor

Arctiq • Spring Valley, NV

1d • Onsite

About The Position

Arctiq is seeking an experienced, independent IT Security Auditor for a confidential, third-party IT security and compliance assessment for a client. The two-week assignment is onsite in Carson City, Nevada. The auditor will evaluate IT operations, infrastructure, security controls, and adherence to applicable NIST standards and guidelines, including NIST SP 800-53 where appropriate and as required by state legislation. The assessment will use a discovery-driven approach to identify security and compliance gaps, assess risks, and provide actionable recommendations while minimizing disruption to business operations. The auditor will work independently and objectively, coordinate access through an authorized administrator and designated agency representative, and deliver a comprehensive NIST compliance gap assessment report. Formal forensic evidence collection and chain-of-custody procedures are outside the primary scope.

Requirements

• Demonstrated experience conducting independent IT security audits, infrastructure assessments, or technology compliance reviews.
• A relevant, recognized security or auditing certification, such as CISA, ISO/IEC 27001 Lead Auditor, or an equivalent credential.
• Strong working knowledge of NIST cybersecurity standards and control frameworks, including familiarity with NIST SP 800-53.
• Hands-on experience assessing enterprise IT environments, including endpoint and network asset discovery, vulnerability management, configuration management, access controls, and software and hardware inventories.
• Experience identifying unauthorized assets or software, security control deficiencies, and potential compliance violations.
• Ability to independently plan and execute technical assessments using auditor-provided tools and methodologies.
• Excellent analytical, documentation, and report-writing skills, including the ability to communicate technical findings and compliance gaps clearly to executive stakeholders.
• Demonstrated professionalism and discretion in confidential, sensitive, or high-accountability environments.
• Ability to maintain an objective third-party perspective and produce defensible, evidence-based findings.
• Must operate as an independent, external third-party auditor and conduct the sensitive assessment with strict confidentiality and discretion.
• Must provide the tools and capabilities needed to conduct network discovery and IT control assessments.
• Must be available to conduct the assessment onsite, with access facilitated by an authorized administrator and designated agency representative.
• Must be prepared to begin work without advance notification to the agency IT team and adapt to findings as they emerge.

Nice To Haves

• Experience conducting security assessments for state or local government agencies or other regulated organizations.
• Experience with confidential or sensitive IT audits involving suspected insider threats or potential unauthorized technology.
• Familiarity with network scanning, asset discovery, vulnerability assessment, and security configuration assessment tools.
• Experience presenting sensitive technical findings and remediation recommendations to senior leadership.

Responsibilities

• Conduct a confidential, independent IT security audit focused on IT operations, infrastructure, and security controls rather than individual employee performance.
• Assess compliance with applicable NIST standards and guidelines, including NIST SP 800-53 where appropriate.
• Evaluate patch and vulnerability management; configuration management and security baselines; identity and access management; IT operations and security controls; software and hardware asset management; network asset discovery and inventory; and detection of potentially unapproved technology.
• Perform network and asset discovery scans using auditor-provided tools to identify connected devices, installed software, and potential asset-visibility gaps.
• Investigate potential indicators of security policy violations, control weaknesses, and insider-threat risks through authorized technical assessments and evidence-based analysis.
• Identify compliant and non-compliant areas, document control deficiencies, assess associated risks, and develop practical remediation recommendations.
• Coordinate with designated agency personnel and an authorized system administrator to obtain necessary access while avoiding direct interaction with business systems wherever possible.
• Maintain confidentiality, independence, objectivity, and professional discretion throughout the engagement.
• Deliver a comprehensive NIST compliance gap assessment report documenting findings, compliance areas, deficiencies, risks, and recommended corrective actions.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed