IT Auditor
Reston, VA
Security Clearance Requirement: TS/SCI CI Poly
Position Description: Our client hiring an IT Auditor and Subject Matter Expert to provide IT audit liaison activities and provide advice to a mix of government and contractor officials and conduct IT internal control testing over the business systems used to generate the agency financial statements.
Duties and responsibilities:
· Evaluate the design and effectiveness of IT controls across the suite of business systems
· Conduct tests around financial system controls compliance, IT General Computer Controls and Application Controls, Access Controls and Configuration management controls
· Review documents, records, reports and methods for accuracy and effectiveness
· Conduct testing and prepare workpapers, write-ups, and memos
· Hold preliminary discussions of apparent deficiencies with system owners and external auditor
· Report audit findings and make recommendations for the correction of unsatisfactory conditions
· Review corrective action plans identifying findings and provide recommendations
· Liaise with external auditors and stakeholders during the annual IT audit
· Educate stakeholder with what to expect and support a successful IT audit
· Develop thorough and defendable remediation packages for Notices of Findings and Recommendations (NFRs)
Education and qualifications:
· U.S. citizenship
· Current TS/SCI Security clearance
· Current CI poly or eligibility to obtain CI poly
· 10 years of relevant experience with a bachelor's degree OR 6 years of relevant experience with a master's degree is required for consideration
· One or more of the following certifications: CISA, CISM, CISSP, CRISC
· Knowledge of Federal Information System Controls Audit Manual (FISCAM) preferred
· Knowledge of OMB A-123 Management's Responsibility over Internal Controls
· Knowledge of Generally Accepted Government Auditing Standards (GAGAS)
· Knowledge of Federal Information Security Management Act (FISMA) preferred
· Experience with National Institute of Standards and Technology (NIST) Federal Information Processing Standards (FIPS) and Special Publications (SP) preferred
· Excellent analytical and organizational skills
· Exceptional communication skills, both verbal and written
· Proficiency with Microsoft Office (Word, Excel, PowerPoint)
· Experience performing FISCAM, NIST, OMB Circular A-123 internal control, audit readiness, SSAE 16, and FISMA security reviews
· Availability to support 10% local travel
Preferred Experience:
· OMB A-123 and/or finance background a plus
· PMP, CGFM, CDFM