Job Details

Job Title: IT Security Auditor

Location: Hybrid (2-3 days onsite)

Pay Rate: $40-$60/hr

Security Clearance: Secret Clearance Required

Position Overview:
We are seeking a highly skilled IT Security Auditor to join our team. This role requires a strong understanding of IT security standards, risk assessment, and control implementation. The ideal candidate will have experience working with federal financial management and accounting regulations, and possess a deep knowledge of FISCAM, NIST RMF, and other relevant frameworks.

Responsibilities:

• Risk Assessment and Control Evaluation: Identify, assess, and evaluate IT inherent and detective risks related to internal controls. Develop and maintain Risk and Control Matrices (RACMs) to support financial statement audits.
• Standards and Framework Adherence: Ensure compliance with information assurance standards such as NIST RMF, 800-53, FISCAM, DODI 8500, DODI 8510, SSAE-18, and AT-C320.
• Corrective Action Implementation: Design, implement, and test corrective actions to address ITAC/ITGC relevant audit risks.
• Process Mapping and Analysis: Conduct end-to-end process mapping of IT systems and processes to identify potential vulnerabilities and control gaps.
• Audit Report Review: Review and evaluate issued audit findings, including NFRs, to ensure accuracy and completeness.
• Security Clearance: Maintain an active security clearance.

• Master's Degree in Accounting, Finance, Information Technology, or Business Management or CPA or CISA or PMP or CGFM or CDFM
• 4 years of experience with federal financial management
• 2 years of federal accounting experience
• Ability to identify controls that mitigate ITAC/ITGC relevant risks
• Demonstrated experience with leveraging FISCAM/NIST RMF as part of testing, reviewing, and guiding
• Experience designing and implementing (or independently testing TOD/TOE) corrective actions to address ITAC/ITGC relevant audit risks

• Experience with Federal/DoD clients
• Experience with business process end-to-end process mapping
• Performing federal audits that provided an audit opinion
• Performing federal audits that issued a disclaimer of opinion
• Experience with evaluating SOC reports in support of a financial statement audit
• Experience with supporting DoD SSAE-18 AT-C examinations as a service auditor