Certified Information Systems Auditor (CISA) - Level II – Ft. Belvoir

BizFirst•Fort Belvoir, VA

40d•Onsite

About The Position

BizFirst is assisting our client with recruiting a Full-time Certified Information Systems Auditor (CISA) - Level II. This position involves an onsite work schedule at the Defense Technical Information Center (DTIC) at Fort Belvoir. Our client is a boutique consulting firm that employs consultants and professionals with unique skill sets to support the federal government with strategic execution, financial process enablement, IT systems, and Enterprise Resource Planning (ERP) software implementation. Interim Secret Clearance or Higher Required. In this role, you will perform comprehensive audits of complex computer information systems, ensuring their security, reliability, and compliance with governmental standards. You will work closely with various teams to validate Key Risk Indicators (KRIs) and IT General Controls (ITGCs), while providing expert guidance and support to our clients.

Requirements

Certified Information Systems Auditor (CISA) in good standing with the Information Systems Audit and Control Association (ISACA)
Minimum of five (5) years of general IS audit experience, with at least two (2) years focused on auditing financial systems of federal government agencies or preparing agencies for audit.
Bachelor’s Degree in a technical discipline such as computer science, information systems, engineering, mathematics, physics, or a related field
Strong analytical, organizational, and communication skills.
Proficiency in developing and using computerized audit tools.
Demonstrated expertise in managing multiple complex work assignments, requiring innovation and originality in problem-solving.
Ability to operate with significant autonomy in developing methodologies and presenting solutions to problems.
Proven track record of contributing to deliverables and performance metrics in a collaborative environment.
US Citizen; Interim Secret Clearance or Higher

Responsibilities

Conduct general and application control reviews for both simple and complex computer information systems, including areas such as backup and disaster recovery, system development standards, system security, programming and communication controls, operating procedures, and system maintenance.
Develop and maintain computerized audit software and follow up on audit findings to ensure corrective actions have been taken.
Perform detailed evaluations of internal controls and consult with clients on operational issues related to their computer information systems.
Assess the design and operational effectiveness of KRIs and ITGCs, and provide guidance on testing methodology, validation processes, adherence to policy, and documentation.
Design, develop, and publish materials to support adherence to established KRI/ITGC validation processes.
Collaborate with other teams, including Risk, IT, and Information Security, to report, track, and follow up on remediation plans
Verify that information technology systems and infrastructure are secure and support the related applications.
Create and deliver presentations to management, discuss audit findings and conclusions, and recommend remediation actions.
Perform follow-ups with clients to ensure the implementation of remediation actions.
Advise clients on maintaining compliance with government standards and guide them through various improvement and modernization initiatives.
Prepare background papers, briefings, speeches, and create web and portal content to support organizational messaging activities.
Support customers in the development, implementation, and maintenance of strategy, doctrine, standards, policies, and procedures.