- Visit client locations for IT/security audits and assessments.
- Collect and review evidence such as policies, access-control records, logs, configurations, and asset lists.
- Perform gap assessments against ISO 27001, NIST, SOC 2, PCI-DSS, etc.
- Assist with risk assessments and vulnerability assessments.
- Interview client IT/security staff and document findings.
- Prepare audit reports, risk registers, and remediation recommendations.
- Follow up with clients to verify that findings have been corrected.
- Work under a senior consultant/lead, especially for larger or higher-risk engagements.