10390- Auditor, Integrated Risk Management

Hyundai Autoever America • Irvine, CA

1d • $83,940 - $120,032

About The Position

Hyundai AutoEver America (HAEA) is seeking a Technology Auditor to join their Integrated Risk Management team. This role will focus on strengthening control testing and validation across the enterprise technology environment. The auditor will design and execute a risk-based control testing program covering cloud, applications, infrastructure, networks, identity, and security tooling. They will partner with control owners, engineers, and risk leaders to ensure controls are effective and operating as intended, and to drive remediation for identified gaps. The position involves supporting internal/external audits and regulatory inquiries, and continuously improving the control testing program through standardization and automation.

Requirements

• Bachelor’s degree in Information Systems, Cybersecurity, Information Technology, Computer science or a related field or equivalent work experience AND 5+ years of experience in technology audit, technology risk, or control testing/assurance.
• Proven experience performing control testing and validation (design and operating effectiveness), including sampling and evidence standards, across a broad spectrum of technology domains.
• Demonstrated strong documentation skills with the ability to produce audit-ready workpapers, test scripts, and results.
• Strong stakeholder management with the ability to work effectively with engineers, control owners, leadership and customers.
• Knowledge of GRC tooling and workflows.
• Excellent stakeholder management and communication skills.
• Ability to translate technical details into clear risk statements, issues, and practical remediation recommendations.

Nice To Haves

• Master’s degree in Cybersecurity, Information Technology, Computer Science or a related discipline or equivalent work experience AND 5+ years of experience as a Technology Auditor at a large professional services firm (e.g., Big 4 or similar) or comparable complex enterprise environment.
• Familiarity with control frameworks and standards such as COSO, COBIT, NIST, ISO 27001, and/or SSAE 16 requirements.
• Industry-recognized credentials such as CISSP, CISM, CISA are highly desirable.

Responsibilities

• Develop and maintain a control testing & validation plan aligned to the organization’s technology risk landscape, including scope, frequency, methodology, and sampling approaches.
• Execute control design and operating effectiveness testing across technology domains (e.g., cloud, infrastructure, network, application, SDLC, IAM, logging/monitoring, vulnerability management, backup/DR).
• Create testing procedures and workpapers that are repeatable, audit-ready, and defensible; ensure evidence is complete, accurate, and traceable.
• Perform walkthroughs and interviews with technology stakeholders to confirm control intent, ownership, and implementation details.
• Validate control implementation technically (where applicable) by inspecting configurations, system settings, logs, tickets, and pipeline artifacts (e.g., CI/CD).
• Identify control gaps and root causes, assess risk impact, and provide clear recommendations and remediation guidance.
• Track and validate remediation activities and re-test controls to confirm closure.
• Produce concise reporting (test results, summaries, themes, and metrics) for IRM leadership and customers.
• Support internal/external audits and regulatory inquiries by providing documentation, testing artifacts, and control narratives.
• Continuously improve the control testing program through standardization, automation opportunities, and alignment to evolving technology.

Benefits

• The team fosters a high-performance, collaborative environment centered around proactive technology risk management and excellent customer service.
• Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges.
• The culture values technical excellence, continuous improvement, and global coordination, ensuring technology risks are well managed.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level