Job Title : IT Security Auditor
Location : Hybrid (2-3 days onsite)
Pay Rate : $40-$60 / hr
Security Clearance : Secret Clearance Required
Position Overview : We are seeking a highly skilled IT Security Auditor to join our team. This role requires a strong understanding of IT security standards, risk assessment, and control implementation. The ideal candidate will have experience working with federal financial management and accounting regulations, and possess a deep knowledge of FISCAM, NIST RMF, and other relevant frameworks.
Responsibilities :
- Risk Assessment and Control Evaluation : Identify, assess, and evaluate IT inherent and detective risks related to internal controls. Develop and maintain Risk and Control Matrices (RACMs) to support financial statement audits.
- Standards and Framework Adherence : Ensure compliance with information assurance standards such as NIST RMF, 800-53, FISCAM, DODI 8500, DODI 8510, SSAE-18, and AT-C320.
- Corrective Action Implementation : Design, implement, and test corrective actions to address ITAC / ITGC relevant audit risks.
- Process Mapping and Analysis : Conduct end-to-end process mapping of IT systems and processes to identify potential vulnerabilities and control gaps.
- Audit Report Review : Review and evaluate issued audit findings, including NFRs, to ensure accuracy and completeness.
- Security Clearance : Maintain an active security clearance.
Qualifications : Must-Haves :
Master's Degree in Accounting, Finance, Information Technology, or Business Management or CPA or CISA or PMP or CGFM or CDFM4 years of experience with federal financial management2 years of federal accounting experienceAbility to identify controls that mitigate ITAC / ITGC relevant risksDemonstrated experience with leveraging FISCAM / NIST RMF as part of testing, reviewing, and guidingExperience designing and implementing (or independently testing TOD / TOE) corrective actions to address ITAC / ITGC relevant audit risksPreferred Skills :
Experience with Federal / DoD clientsExperience with business process end-to-end process mappingPerforming federal audits that provided an audit opinionPerforming federal audits that issued a disclaimer of opinionExperience with evaluating SOC reports in support of a financial statement auditExperience with supporting DoD SSAE-18 AT-C examinations as a service auditor