IT Security Auditor – Senior Consultant

Job title: IT Security Auditor – Senior Consultant

About the Role The Senior IT Security Auditor will lead stakeholder engagement and technical delivery for efforts supporting federal agencies with IT controls assessments and program evaluations. This is an ideal role for someone with an information security and assurance or IT audit background who is looking to utilize their skills to work with the federal government to analyze IT control weaknesses, identify root causes, and develop remediation plans.

What You'll Do

• Lead stakeholder engagement and technical delivery for IT controls assessments and program evaluations for federal agencies.
• Perform assessments of IT controls using industry-standard guidance and leading practices.
• Conduct interviews and discussions with a variety of client stakeholders, including IT system personnel such as Information System Security Officers (ISSOs) and system administrators.
• Review and analyze documents and artifacts to assist in IT controls testing such as system security plans, SOPs, audit logs, configuration scans, and vulnerability scans.
• Evaluate the implementation and effectiveness of IT controls using provided artifacts against federal requirements, industry guidance, and leading practices.
• Document the results of IT controls testing and remediation plans.
• Travel up to 10% to client sites as needed.

What We're Looking For

• Information security and assurance or IT audit background.
• Experience with IT controls assessments and program evaluations for federal agencies.
• Ability to conduct interviews with IT system personnel (e.g., ISSOs and system administrators).
• Experience reviewing artifacts such as system security plans, SOPs, audit logs, configuration scans, and vulnerability scans.
• Ability to analyze IT control weaknesses, identify root causes, and develop remediation plans.
• Knowledge of federal requirements and leading industry practices.
• Strong communication and stakeholder engagement skills.
• Active Top Secret/SCI clearance with polygraph required.