IT Audit Senior

Castro & Co. • Alexandria, VA

9d

About The Position

Are you ready to take the next step in your IT audit career? Join Castro & Company as an IT Audit Senior supporting our federal clients. You’ll work with high-performing teams on FISCAM, FISMA, and SOC readiness engagements — leading IT audits and control assessments that make a measurable impact. This role is ideal for an experienced, motivated professional passionate about technology, risk management, and client service.

Requirements

• Bachelor’s Degree in IT and business-related field
• Must have a minimum of 2-year experience with related work performing IT testing in support of a financial statement audit, SOC 1 type 2 examination and/or FISMA Audit).
• Must have experience leading IT control walkthroughs and documenting IT audit work papers, and audit deliverables.
• Must have experience and strong desire coaching and developing Staff team members.
• Must thrive in a fast-paced environment while maintaining a strong attention to details.
• Must be able to multi-task various tasks with various deadlines.
• Strong proficiency in Microsoft Office (Excel, PowerPoint, and Word) along with experience in Microsoft PowerApps or other automated tools is preferred.
• Security Clearance: Must be able to pass a basic government suitability check (US Citizenship required).

Nice To Haves

• CISA/CISSP preferred.
• Strong proficiency in Microsoft Office (Excel, PowerPoint, and Word) along with experience in Microsoft PowerApps or other automated tools is preferred.

Responsibilities

• Support FISCAM/FISMA Audit, and Service Organization Control Report – SOC 1 Type 2 readiness engagements by completing assigned engagement tasks within the project scope and budget, while meeting deliverable requirements.
• Leading client meetings and coordination/oversight with action items.
• Evaluating IT General Controls (ITGCs) using NIST standards and frameworks – to include NIST 800-53, NIST Cybersecurity Framework (CSF), and NIST Risk Management Framework (RMF).
• Leading and coaching Staff level team members.
• Leading IT testing procedures in accordance with Government standards (Generally Accepted Government Auditing Standards (GAGAS)) and other industry frameworks.
• Analyzing data and creating outputs that summarize client’s IT and cybersecurity posture.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level