IT Audit Consultant

Job Summary

Provide audit and compliance support to prepare for, respond to, and track internal and external IT audits. Coordinate with agency personnel, technical staff, and documentation resources to ensure accurate and timely audit deliverables. Assist in planning, coordinating, and supporting information technology audits.

Responsibilities

• Coordinate with agency personnel, technical staff, and documentation resources to ensure accurate and timely audit deliverables.
• Audit responses and submit required evidence.
• Develop and track Corrective Action Plans (CAPs), Plans of Action and Milestones (POA&Ms), Safeguard and Security Reports, security assessment responses, and audit status reports.
• Track audit findings through remediation and closure, ensuring issues are resolved.
• Work with business units and technical staff to gather supporting documentation.
• Identify and address documentation gaps by facilitating development or revision of policies, standards, procedures, and governance documents.
• Review submitted evidence to ensure completeness, consistency, and compliance with requirements.
• Maintain organized audit documentation repositories.
• Support periodic compliance assessments and conduct internal compliance reviews.
• Assist with risk assessments and prepare compliance reports.

Requirements

• Knowledge of information security governance, IT audit processes, risk management, control assessments, NIST Cybersecurity Framework, NIST SP 800-53, IRS Publication 1075, CAPs, POA&Ms, audit evidence collection, compliance collection, documentation, and security control implementation.

Preferred Skills

• Experience supporting IRS, SSA, or OSA audits.
• Relevant certifications such as CISA, CGRC, CISSP, CRISC, Security+, or equivalent.