IT Audit Consultant

Primary Responsibilities

• Audit and compliance support services for internal and external audits.
• Cook coordination with agency personnel, technical staff, and documentation resources.
• Development and tracking of: Corrective Action Plans, Plans of Action and Milestones, Safeguard and Security Reports, security assessment responses, audit status reports.
• Track audit findings through remediation and closure.
• Coordinate with business units and technical staff to obtain supporting documentation.
• Identify documentation gaps and work with other staff to facilitate development or revision of policies, standards, procedures, and other governance documentation.
• Review submitted evidence for completeness, consistency, and compliance.
• Maintain audit documentation repositories.
• Support periodic compliance assessments and internal reviews.
• Audit risk assessments and compliance reporting.

Required Skills And Experience

• Demonstrated knowledge with several of the following: Information security governance, IT audit processes, Risk management, Control assessments, NIST Cybersecurity Framework, Nist SP 800-53, IRS Publication 1075, Corrective Action Plans (CAPs), Plans of Action and Milestones (POA&Ms), Audit evidence collection, Compliance collection, Compliance documentation, Security control implementation.

Preferred Qualifications

• Experience supporting IRS, SSA, or OSA audits and responses.
• CISA, CGRC, CISSP, CRISC, Security+ or equivalent certifications.