IT Auditor SME

Position: IT Auditor SME

Location: Reston, VA 20190

 Security Clearance Requirement: Current TS/SCI

Location Note: On-Site Support Required

Position Description: IT Auditor and Subject Matter Expert to provide IT audit liaison activities and advice to a mix of government and contractor officials. Conduct IT internal control testing over the business systems used to generate the agency’s financial statements. The candidate must have IT audit experience.

Duties and responsibilities:
  • Evaluate the design and effectiveness of IT controls across the suite of business systems
  • Conduct tests around financial system controls compliance, IT General Computer Controls and Application Controls, Access Controls and Configuration management controls
  • Review documents, records, reports and methods for accuracy and effectiveness
  • Conduct testing and prepare workpapers, write-ups, and memos
  • Hold preliminary discussions of apparent deficiencies with system owners and external auditor
  • Report audit findings and make recommendations for the correction of unsatisfactory conditions
  • Review corrective action plans identifying findings and provide recommendations
  • Liaise with external auditors and stakeholders during the annual IT audit
  • Educate stakeholder with what to expect and support a successful IT audit
  • Develop thorough and defendable remediation packages for Notices of Findings and Recommendations (NFRs)
Education and qualifications:
  • U.S. citizenship
  • Current TS/SCI Security clearance
  • Current CI poly or eligibility to obtain CI poly
  • 8 years of relevant experience with a bachelor’s degree OR 6 years of relevant experience with a master’s degree is required for consideration
  • One or more of the following certifications: CISA, CISM, CISSP, CRISC
  • Knowledge of Federal Information System Controls Audit Manual (FISCAM) preferred
  • Knowledge of OMB A-123 Management’s Responsibility over Internal Controls
  • Knowledge of Generally Accepted Government Auditing Standards (GAGAS) 
  • Knowledge of Federal Information Security Management Act (FISMA) preferred
  • Experience with National Institute of Standards and Technology (NIST) Federal Information Processing Standards (FIPS) and Special Publications (SP) preferred
  • Excellent analytical and organizational skills
  • Exceptional communication skills, both verbal and written
  • Proficiency with Microsoft Office (Word, Excel, PowerPoint)
  • Experience performing FISCAM, NIST, OMB Circular A-123 internal control, audit readiness, SSAE 16, and FISMA security reviews

Become a Part of Our Team