Cybersecurity Audit Analyst

Job Description: Cybersecurity Specialist (Audit, GAP Analysis & Security Program Development) Position Summary

The Cybersecurity Specialist is responsible for assessing, designing, and improving the organization’s cybersecurity posture. This role performs cybersecurity audits, conducts GAP analyses against industry frameworks, provides security recommendations, and develops cybersecurity policies, procedures, and governance programs to reduce organizational risk and ensure compliance with regulatory and industry standards.

The ideal candidate combines technical cybersecurity expertise with risk management, compliance knowledge, and strong documentation skills.

Key ResponsibilitiesCybersecurity Audits & Assessments

• Conduct comprehensive cybersecurity audits across infrastructure, applications, and business processes.
• Evaluate security controls, configurations, and operational practices.
• Identify vulnerabilities, risks, and control deficiencies.
• Perform internal security reviews aligned with recognized frameworks.

GAP Analysis

• Perform GAP analyses against cybersecurity frameworks such as:
• NIST Cybersecurity Framework (CSF)
• NIST SP 800-171 / 800-53
• CMMC (Level 1–2 preferred)
• ISO 27001
• CIS Critical Security Controls
• Document current-state vs. target-state security posture.
• Develop remediation roadmaps and prioritized action plans.

Security Recommendations & Guidance

• Provide strategic and technical cybersecurity recommendations.
• Advise leadership on risk mitigation strategies and security investments.
• Support implementation planning for security tools and controls.
• Assist IT teams with secure architecture and best practices.

Cybersecurity Program Development

• Develop and maintain cybersecurity policies, standards, and procedures.
• Create governance documentation and security frameworks.
• Establish risk management and compliance processes.
• Support incident response planning and business continuity strategies.
• Help build security awareness and training programs.

Documentation & Reporting

• Produce audit reports, risk assessments, and executive summaries.
• Track remediation progress and compliance metrics.
• Present findings to technical teams and executive leadership.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).
• 3–7 years of cybersecurity or information security experience.
• Experience performing cybersecurity audits or security assessments.
• Strong knowledge of cybersecurity frameworks and compliance standards.
• Experience conducting GAP analyses and risk assessments.
• Demonstrated experience writing security policies and procedures.
• Understanding of:
• Network security
• Endpoint protection
• Identity & Access Management (IAM)
• Vulnerability management
• Cloud security concepts
• Strong analytical and documentation skills.

Preferred Qualifications

• Experience with CMMC Level 2 environments.
• Security certifications such as:
• CISSP
• CISM
• CISA
• Security
• CRISC
• Experience with governance, risk, and compliance (GRC) tools.
• Familiarity with Microsoft 365, Azure, AWS, or hybrid environments.
• Experience supporting regulated industries (Healthcare, DoD contractors, Finance, etc.).

Key Skills

• Cybersecurity auditing
• Risk assessment & mitigation
• GAP analysis
• Policy and procedure development
• Security architecture understanding
• Compliance management
• Technical writing and reporting
• Stakeholder communication

Typical Deliverables

• Cybersecurity audit reports
• GAP analysis documentation
• Risk register and remediation roadmap
• Security policies and procedures
• Compliance readiness documentation
• Executive security posture reports

Work Environment

• Hybrid or remote depending on organizational needs.
• Collaboration with IT, compliance, leadership, and external auditors.

Job Type: Contract

Pay: $45.00 - $55.00 per hour

Compensation Package:

• 1099 contract

Application Question(s):

• This opportunity is for a month and half. Once assessment is complete s o is the project.

Experience:

• Cybersecurity: 2 years (Required)

License/Certification:

• CISSP (Preferred)

Work Location: Hybrid remote in Chicago, IL 60644

Salary : $45 - $55