W2 CANDIDATES ONLY!!
REMOTE
Job Description
The client is seeking an External Audit Consultant to provide FISMA compliance, information security, technology audit, IV&V, and remediation support. The consultant will assist with annual FISMA audits, assess technology controls and policies, validate audit findings, identify vulnerabilities and compliance gaps, and develop recommendations to improve security and compliance practices.
Key Responsibilities
• Support preparation for annual FISMA audits and internal FISMA reviews.
• Evaluate and maintain technology compliance programs.
• Advise technology managers on information security, compliance, and internal controls.
• Conduct Independent Verification & Validation (IV&V) assessments.
• Assess and validate audit findings and document recommendations.
• Crosswalk evidence and security programs against CISA and FedRAMP standards and procedures.
• Develop remediation action plans and assist with implementation.
• Identify vulnerabilities and recommend solutions to improve security practices.
• Design, test, and implement audit mechanisms to detect non-compliance.
• Maintain appropriate audit trails and evidentiary documentation.
• Create audit, monitoring, compliance, and status reports.
• Update compliance policies, processes, procedures, and standards.
Required Skills
• 10+ years of progressive IT experience in IT Audit, IT Security, IT Management, Business Analysis, System Administration, or related areas.
• FISMA Compliance
• NIST 800-series
• Information Security / Cybersecurity
• Technology Compliance
• IT Audit / External Audit
• Internal Controls
• Risk & Vulnerability Assessment
• Audit Findings & Remediation
• IV&V
• Security and audit documentation
• Strong written and verbal communication
• Project management and ability to manage multiple complex assignments
• Experience with cloud and/or on-premises applications
Preferred Skills
• CISA
• CISSP
• FedRAMP
• Financial systems security/audit experience
• Security controls assessment
• Compliance automation
• Policy, procedure, and standards development