Job Description

Roles/Responsibilities:

• Assist with planning, coordinating, and supporting information technology audits.
• Prepare and coordinate audit responses and evidence submissions.
• Assist with development and tracking of: Corrective Action Plans, Plans of Action and Milestones, Safeguard and
• Security Reports, security assessment responses, audit status reports.
• Track audit findings through remediation and closure.
• Coordinate with business units and technical staff to obtain supporting documentation.
• Identify documentation gaps and work with other staff to facilitate development or revision of policies, standards,
• procedures, and other governance documentation.
• Review submitted evidence for completeness, consistency, and compliance.
• Monitor remediation activities and provide status reporting to management
• Assist with implementation and documentation of corrective actions.
• Maintain audit documentation repositories.
• Support periodic compliance assessments and internal reviews.
• Assist with risk assessments and compliance reporting.

Mandatory Skills:

1. Demonstrated knowledge with several of the following:
   1. Information security governance
   2. IT audit processes
   3. Risk management
   4. Control assessments
   5. NIST Cybersecurity Framework
   6. Nist SP 800-53
   7. IRS Publication 1075
   8. Corrective Action Plans (CAPs)
   9. Plans of Action and Milestones (POA&Ms)
   10. Audit evidence collection
   11. Compliance collection
   12. Compliance documentation
   13. Security control implementation

Desirable Skills:

1. Experience supporting IRS, SSA, or OSA audits and responses.
2. CISA, CGRC, CISSP, CRISC, Security+, or equivelant certifications.

Job Tags

Similar Jobs