IT Security Auditor – Senior Consultant
Core
Lead stakeholder engagement and technical delivery for IT controls assessments and program evaluations supporting federal agencies.
Role type
Senior IT Security Auditor (Consultant)
Builds
IT controls assessments, remediation plans, and security assurance reports for federal clients.
Domain
Federal Government / IT Security & Assurance
Required skills
IT controls assessment, federal security laws (FISMA, NIST SP 800), root cause analysis, remediation planning, stakeholder engagement, documentation, mentoring
Preferred skills
CISA, CISM, access management auditing, contingency planning auditing, configuration management auditing, audit logging and monitoring
Technologies
NIST SP 800 series, FISMA, FISCAM, DISA STIGs, OMB Circular A-123
Responsibilities
Perform IT controls assessments using industry guidance, conduct stakeholder interviews, review security artifacts (plans, logs, scans), evaluate control effectiveness, document testing results, communicate findings to leadership, develop remediation plans, provide subject matter expertise, mentor junior team members
Seniority
Senior, hands-on IC with mentorship duties