Certified Information Systems Auditor (CISA)

About the role

The Certified Information Systems Auditor (CISA) will plan and execute audits of the client's information systems and controls to ensure compliance, mitigate risk, and demonstrate operational effectiveness.

Responsibilities

• Evaluate and test IT General Controls (ITGCs), including change management, logical access, and IT operations, to assist with the annual SOC 1 audit.
• Assess the design and operating effectiveness of security controls in support of the Risk Management Framework (RMF) authorization.
• Develop audit plans, execute control testing procedures, and collect evidence to demonstrate compliance with DoD policies and industry best practices.
• Collaborate with engineering and operations teams to review system configurations, audit logs, and process documentation, identifying control deficiencies and providing actionable recommendations for remediation.

Requirements

• Equivalent Training: Completion of one of the following accepted training programs:
• Holding one of these certifications:
• SecurityX / CASP+
• CGRC/CAP
• GSEC
• GSNA
• Security+
• SSCP
• 4 years of experience with IT audit/compliance experience
• Experience conducting audits (ideally SOC, NIST, or RMF)

Qualifications

Active Secret, Top Secret, TS/SCI, or TS/SCI with Polygraph clearance required, depending on position.

Skills

N/A

Benefits

N/A

Pay

$78,600 - $160,200 USD

Schedule

N/A