Audit Specialist - Cyber Security (Mid-Level)

ASSYST's Information Assurance and Cyber Security Practice supports Federal, State, and Local government clients through end-to-end cyber services including architecture, design, policy, monitoring, detection, remediation, compliance, awareness, and training.

Responsibilities

• Serve as liaison between external auditors and internal security systems.
• Conduct compliance checks and vulnerability assessments for internal teams to ensure adherence to FISMA / NIST Framework.
• Identify, define, and assess documents for complex system reports and technical requirements within cross-functional teams.
• Develop and assess reports for audit project metrics, status reports, risk logs, POAM creation, and lessons learned per audit.
• Conduct data calls and compliance checks for various audits and projects for security systems.
• Work alongside system owners, ISSO, and CRA oversight.
• Track all deliverables, report regularly on control exceptions and deficiencies per system, ensure that measures raised in assessments are implemented following risk profiles, and address the root causes of risks using NIST guidelines.
• Coordinate preliminary investigations to acquire artifacts for all requests associated with various ad-hoc audits across multiple stakeholders (system owners) and organizations.
• Perform audits for FISMA-A123, CFO, and other frameworks.
• Perform data entry into client's Governance, Risk, and Compliance tools for audits and system reports for the current and future fiscal year.

Requirements

• 3-5 years of experience in a similar position focused on IT Audit / Cyber Security supporting Federal programs.
• Experience in information security, policy and risk management, auditing, and audit management.
• Familiarity with the Risk Management Framework, NIST 800-53, Vulnerability Analysis, FISMA, and FedRAMP.
• CISA Certification (Certified Information Systems Auditor) preferred.
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.