IT Audit Consultant 162149

KēSTA I.T.•Jackson, MS

5d•Onsite

About The Position

KēSTA I.T. is actively seeking an experienced IT Audit Consultant for an immediate contract engagement with a government client. This role provides audit, compliance, and risk management support for enterprise information technology and cybersecurity initiatives. The position is responsible for coordinating internal and external audit activities, managing audit documentation, supporting compliance assessments, tracking corrective actions, and ensuring audit requirements are addressed accurately and efficiently. The ideal candidate possesses a strong understanding of IT audit processes, information security governance, cybersecurity frameworks, and compliance documentation, coupled with excellent organizational and communication skills.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Business Administration, or a related field, or equivalent professional experience.
Experience supporting IT audit, compliance, or information security governance initiatives.
Strong understanding of IT audit processes and audit lifecycle management.
Knowledge of information security governance and risk management principles.
Experience performing control assessments and supporting compliance initiatives.
Working knowledge of the NIST Cybersecurity Framework (CSF).
Working knowledge of NIST SP 800-53.
Working knowledge of IRS Publication 1075.
Experience developing, tracking, and managing Corrective Action Plans (CAPs).
Experience developing, tracking, and managing Plans of Action and Milestones (POA&Ms).
Experience developing, tracking, and managing audit evidence and compliance documentation.
Knowledge of security control implementation and compliance validation.
Experience collecting, organizing, and maintaining audit evidence and documentation repositories.
Strong analytical, organizational, and problem-solving skills.
Excellent written and verbal communication skills with the ability to collaborate across technical and business teams.
Ability to manage multiple priorities while maintaining attention to detail and meeting deadlines.

Nice To Haves

Experience supporting IRS, SSA, OSA, or other regulatory audits and audit response activities.
Professional certifications such as CISA, CGRC, CISSP, CRISC, Security+, or equivalent.
Experience supporting enterprise governance, risk, and compliance (GRC) programs.
Familiarity with cybersecurity risk assessments, regulatory compliance reporting, and security governance best practices.
Experience developing or improving audit, compliance, and governance documentation.

Responsibilities

Assist in planning, coordinating, and supporting internal and external IT audits.
Prepare, organize, and coordinate audit responses, evidence submissions, and supporting documentation.
Develop, maintain, and track Corrective Action Plans (CAPs), Plans of Action and Milestones (POA&Ms), Safeguard and Security Reports, security assessment responses, and audit status reports.
Track audit findings through remediation, validation, and final closure.
Coordinate with business units, technical teams, and stakeholders to obtain required audit evidence and documentation.
Review audit evidence for completeness, accuracy, consistency, and compliance with applicable standards.
Identify documentation gaps and collaborate with teams to develop or update policies, standards, procedures, and governance documentation.
Monitor remediation activities and provide regular audit and compliance status reports to management.
Assist with implementing and documenting corrective actions resulting from audit findings.
Maintain audit documentation repositories and ensure documentation is organized and up to date.
Support periodic compliance assessments, internal reviews, and security control evaluations.
Assist with risk assessments and compliance reporting activities.
Ensure audit activities align with organizational governance, security, and regulatory requirements.