External Audit Consultant

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Engage in the evaluation, development, maintenance, and enhancement of the technology compliance program.

• Provide guidance to the technology support officer and technology managers regarding compliance, information security, and internal controls.

• Prepare technology departments for annual FISMA audits.

• Assist in creating documentation to support internal FISMA assessments.

• Collaborate with team members to devise solutions that reduce vulnerabilities.

• Counsel the technology officer on compliance matters and suggest potential solutions.

• Submit weekly status reports to the COR that detail concerns, issues, risks, and progress.

• Recommend and assist in the implementation of automated solutions for compliance, auditing, and vulnerability detection.

• Design, test, and implement auditing mechanisms to identify non-compliance and support evidentiary evaluations.

• Ensure that appropriate audit trails are maintained.

• Generate audit and monitoring reports as instructed.

• Evaluate and validate audit findings for systems of record against Board policies; document findings and recommendations.

• Align evidence and the latest Board Information Security Program with CISA and FedRAMP standards and procedures.

• Provide recommendations, create action plans, and assist in implementing measures to enhance compliance and security practices.

• Document updates to compliance-related policies, processes, procedures, and standards as directed.

⛳️ Requirements

• US Citizenship is mandatory.

• Minimum clearance required: US Citizen.

• A minimum of ten years of progressively responsible experience in the information technology field as an IT auditor, IT security analyst, IT manager, business analyst, system administrator, or a combination of these roles.

• Experience with cloud and on-premises applications is preferred.

• Proven experience in leading and successfully developing audit- and security-related system documentation and requirements is desired.

• Strong verbal and written communication skills that are clear, concise, and effective.

• Project management abilities suitable for functioning within an unstructured matrix management environment.

• Experience in evaluating financial systems utilizing NIST 800 series or FISMA Compliance is strongly preferred.

• CISSP or CISA certification is strongly desired.

• Capability to meet the specified physical demands, including lifting up to 20 pounds and communicating with clients and the public.

🏝️ Benefits

• Opportunities for long-term growth and development.

• Competitive compensation package.

• Comprehensive benefits package.

• Option to work on-site periodically if preferred.