Mid-Level Audit/COOP Business Analyst

Chenega Corporation•Washington, DC

5d•Hybrid

About The Position

Chenega Services & Federal Solutions, LLC, a Chenega Professional Services’ company, is looking for a Mid-Level Audit/COOP Business Analyst to support the Federal Housing Finance Agency (FHFA) audit, assessment and continuity of operations (COOP) activities by evaluating information technology systems, cybersecurity controls, and business processes. This position supports Federal Information Security Modernization Act (FISMA) audits, Office of Inspector General (OIG) audits, information technology control assessments, implementation of COOP and remediation tracking activities. The analyst is responsible for documenting audit procedures, analyzing technical and operational evidence, identifying control weaknesses, and communicating findings and recommendations to stakeholders. Our company offers employees the opportunity to join a team where there is a robust employee benefits program, management engagement, quality leadership, an atmosphere of teamwork, recognition for performance, and promotion opportunities. We actively strive to channel our highly engaged employee’s knowledge, critical thinking, and innovative solutions for our clients.

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Accounting, Business Administration, or a related field.
Three (3) to five (5) years of experience supporting federal IT audits, cybersecurity assessments, FISMA evaluations, OIG audits, COOP implementations or related compliance activities.
Experience maintaining audit documentation, workpapers, and supporting evidence.
Experience with disaster recovery planning, risk assessments, and business impact analyses, including the development and execution of disaster recovery tests and simulations.
Strong written and verbal communication skills.
Ability to obtain and maintain a Public Trust clearance.
Ability to analyze large datasets and identify risks, trends, and control weaknesses.
Strong analytical, organizational, and problem-solving skills.
Ability to prepare professional reports, presentations, audit documentation, and briefing materials.
Ability to communicate technical concepts effectively to both technical and non-technical audiences.
Ability to manage multiple assignments and meet established deadlines.
Proficiency with Microsoft Office Suite, including Excel, Word, PowerPoint, Outlook, and Teams.
Ability to work independently and collaboratively in a hybrid work environment.
Ability to maintain professionalism and confidentiality while handling sensitive information.

Nice To Haves

Certified Information Systems Auditor (CISA).
Certified Information Systems Security Professional (CISSP).
Certified Information Security Manager (CISM).
Experience reviewing Service Organization Control (SOC) reports.
Experience using Governance, Risk, and Compliance (GRC) platforms or audit management tools.
Experience developing executive-level dashboards and reporting metrics.
Familiarity with cybersecurity continuous monitoring programs.

Responsibilities

Support the planning, execution, and reporting of FISMA audits, OIG audits, information technology audits, and cybersecurity assessments.
Evaluate information security controls and assess compliance with FISMA, NIST guidance, FHFA policies, and federal cybersecurity requirements.
Collect, review, and maintain audit evidence, supporting documentation, and workpapers in accordance with federal audit standards.
Coordinate with system owners, cybersecurity personnel, business stakeholders, and audit teams to obtain required documentation and evidence.
Assist in developing audit programs, test procedures, risk assessments, and evaluation methodologies.
Track audit findings, recommendations, corrective actions, and Plans of Action and Milestones (POA&Ms) through remediation and closure.
Prepare status reports, briefing materials, dashboards, and executive-level summaries of audit activities and remediation efforts.
Participate in interviews, walkthroughs, control testing, and validation activities.
Communicate audit results and recommendations clearly to technical and non-technical audiences.
Maintain awareness of emerging cybersecurity threats, federal audit standards, and industry best practices.
Assist senior auditors and project leadership in the execution of contract deliverables and customer support activities.
Develop and Execute Disaster Recovery Tests and Simulations: Develop and execute disaster recovery tests and simulations to validate the effectiveness of DR plans and procedures.
Implement and Manage Backup Strategies: Implement and manage backup strategies to ensure that data is regularly backed up and can be restored effectively.
Oversee Data and System Restoration: Oversee the restoration of data and systems from backups in the event of a disaster or data loss incident.
Maintain Detailed Documentation: Create and maintain detailed documentation of disaster recovery plans, processes, and procedures.
Continuously Review and Improve DR Strategies: Continuously review and improve DR strategies and procedures to ensure they remain effective and up-to-date.