Journeyman Information Systems Auditor

Responsibilities

• Enhancing and executing mandated internal and external Cybersecurity audits
• Collecting, analyzing, and submitting FISMA metrics on a quarterly and annual basis
• Working with HHS on FISMA metrics submissions and addressing follow-up questions
• Conducting program and project management activities necessary to address audit findings
• Performing Information Technology audits and cybersecurity assessments
• Performing customer outreach for upcoming audits
• Developing audit materials for non-IT audiences
• Performing technical writing to document outcomes of audits
• Conducting meetings with CDC leadership to develop prioritized lists of program objectives
• Developing ongoing audit status reports using tools such as Microsoft 365 suite
• Coordinating, scheduling, and leading audit status and priority review meetings
• Providing professional services support for the implementation of specific actions to help meet program objectives
• Enhancing, maintaining, and providing leadership with audit tracking tool(s)
• Documenting and defining corrective actions required to meet each recommendation objective
• Facilitating recurring touchpoint meetings with leadership to review the status of outstanding audit items
• Creating audit responses and closure packages containing deliverables required for external audit and internal assessment
• Developing documentation required to directly support audit requests and remediation using the implementation of technical controls mapped to the NIST Cybersecurity Framework
• Drafting high-level briefings and preparing briefing materials for critical audit initiatives

Requirements

• A minimum of 5 years of experience in IT auditing or a related field.
• Experience in performing audits in a federal contracting environment.
• A minimum active Public Trust clearance or higher is required.
• Education & Certifications:
  • A Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or similar area of study or equivalent practical experience.
  • A CISA certification is required.
  • A CISSP or CISM certifications are highly desirable.

Hard Skills

• IT auditing
• cybersecurity assessments
• technical writing
• audit tracking
• FISMA metrics
• NIST Cybersecurity Framework
• program management
• project management
• corrective actions
• audit documentation

Soft Skills

• leadership
• communication
• customer outreach
• meeting facilitation
• organizational skills
• collaboration
• prioritization
• reporting
• analytical skills
• problem-solving

Certifications & Qualifications

• CISA
• CISSP
• CISM
• Public Trust clearance

Tools & Technologies

• Microsoft 365
• audit tracking tools
• briefing materials
• status reports
• external audit systems
• internal assessment tools
• remediation documentation
• program objectives tracking
• project scheduling tools
• technical controls