A bachelor's degree in Information Technology/Services/Systems, Computer Science, or a related discipline.
Two to five years of IT audit experience.
Knowledge of SOX 404, FISCAM, FISMA, and/or the NIST Special Publication series.
IT audit experience within the federal government.
Experience with federal IT security tools.
Responsibilities
Conduct reviews of general support system controls and applications.
Prepare clear and timely reports.
Discuss audit reviews with senior members of the audit team.
Identify misstatements, errors, and control weaknesses within audited operations.
Identify potential control weaknesses and advise management of the associated risks and impacts so appropriate action can be taken to eliminate or manage them.
Provide management and technical professionals with advice concerning technology, information security, and financial risk.
Provide FISCAM/FISMA policy and analysis support to client personnel for multiple applications and networks.
Establish and implement organizational policies supporting efficient FISMA audits.
Document assessments of the design and fairness of IT control objectives in compliance with current NIST instructions.
Participate in audit entrance and exit conferences and present audit findings.
Provide client insight into the content of control objectives and activities.
Perform document walk-throughs and facilitate client meetings.
Perform document testing of controls, including design and operating effectiveness.
Communicate with team members to plan engagements and develop work program timelines, risk assessments, and other planning documents.
Assist the Command in developing internal audit capabilities to sustain audit readiness.
Develop and implement automated and manual financial reconciliations for audit-readiness sustainment.
Assist the Command with accounting and budgeting policy, financial and feeder systems support, transactional support, process improvements, financial reporting, and program management support.
Desired Qualifications
Certified Information Systems Auditor, Certified Information Systems Security Professional, and/or Certified Public Accountant certification.
Senior IT Auditor
Responsibilities include conducting reviews of general support system controls and applications, preparing reports in a clear and timely manner, discussing audit reviews with senior members of the audit team, identifying misstatements/errors, and control weaknesses within the audited operations. The position also requires the ability to identify where control weaknesses may exist and advise management of the risk/impacts in order to take the appropriate course of action to eliminate or manage the weaknesses identified. Likewise, the auditor will serve as a consultant, providing advice to management and technical professionals concerning technology, information security, and financial risk.
Responsibilities:
Provide FISCAM/FISMA policy and analysis support to client personnel for multiple applications and networks
Establish and implement organization policies in support of establishing efficient FISMA audits
Document the assessment of design and fairness of IT control objectives in compliance with latest NIST instructions
Participate in audit entrance/exit conferences and presenting audit findings
Provide insight to the client on the content of control objectives and activities
Perform document walk-through and facilitating client meetings
Perform document testing of controls, design, and operating effectiveness of controls
Communicate with other members of the team to plan the engagement and develop work program timelines, risk assessments and other planning documents
Assist the Command in developing internal audit capabilities for sustainment of audit readiness
Develop and implement automated and manual financial reconciliations to be used in audit-readiness sustainment
Assist the Command with accounting and budgeting policy, financial and feeder systems support, transactional support, process improvements, financial reporting, and program management support
Requirements:
Bachelor’s Degree (Information Technology/Services/Systems, Computer Science or related discipline)
2-5 year(s) of IT audit experience
Knowledge of SOX 404, FISCAM, FISMA and/or NIST special publication series