About this role
About Frazier & Deeter
Join Frazier & Deeter and be a part of a rapidly growing Top 50 accounting & advisory firm that has been repeatedly named a Best Firm to Work For, a Best Firm for Women and a Pacesetter firm among U.S. accounting firms. With several offices across the U.S., UK, and India, there is a spot for you!
We serve clients of all sizes across the United States and the globe, with a suite of services that grow every year. Our growth mindset and entrepreneurial environment translates into variety and opportunity for our people.
At Frazier & Deeter, we’re committed to training, mentoring, and developing our staff members. With our emphasis on Investing in Relationships to Make a Difference and a Firmwide Focus on Inclusion, we help each other grow in every aspect of life.
About the Role
To lead, govern, and optimize the organization's information security compliance program, specifically driving end-to-end adoption, maintenance, and defense of the HITRUST CSF framework to mitigate risk and enable business growth.
Responsibilities
-
Lead HITRUST CSF assessments (readiness, validated, and interim) including planning, scoping, control testing, and reporting.
-
Evaluate the design and operating effectiveness of security, privacy, and IT controls against HITRUST CSF requirements and related frameworks.
-
Review and challenge audit evidence, identify control gaps, assess risks, and validate remediation activities.
-
Manage client interactions and stakeholder communications, including walkthroughs, status discussions, and presentation of audit observations and recommendations.
-
Review work performed by junior team members, provide coaching, and ensure adherence to audit methodology and quality standards.
-
Support engagement management and practice development, including project planning, resource coordination, methodology improvements, and business development activities.
Qualifications and Experience
-
Bachelor’s degree in information technology, Computer Science, Information Systems, Accounting, or a related field.
-
3-5 years of experience in IT Audit, Risk Advisory, Information Security, Compliance, or Cybersecurity Assurance.
-
Hands-on experience performing audits and assessments against frameworks such as HITRUST CSF, SOC 1/SOC 2, ISO 27001, NIST, HIPAA, and PCI DSS.
-
Strong understanding of IT General Controls (ITGCs), access management, change management, logical security, incident management, vulnerability management, and data protection controls.
-
Experience in audit planning, control testing, evidence evaluation, issue identification, and report preparation.
-
Proven ability to manage client interactions, lead walkthroughs, and coordinate audit engagements with minimal supervision.
-
Professional certifications such as CISA, CISSP, CRISC, HITRUST CCSFP, or ISO 27001 Lead Auditor preferred.
-
What FD offers
-
Competitive salary.
-
Clear career path within the firm.
-
Personal and professional skills development and training support.