IT Audit Senior

Castro & Company • Alexandria, VA

1d

About The Position

IT Audit Senior Are you ready to take the next step in your IT audit career? Join Castro & Company as an IT Audit Senior supporting our federal clients. You’ll work with high-performing teams on FISCAM, FISMA, and SOC readiness engagements — leading IT audits and control assessments that make a measurable impact. This role is ideal for an experienced, motivated professional passionate about technology, risk management, and client service. What will you do in this role: Support FISCAM/FISMA Audit, and Service Organization Control Report – SOC 1 Type 2 readiness engagements by completing assigned engagement tasks within the project scope and budget, while meeting deliverable requirements. Leading client meetings and coordination/oversight with action items. Evaluating IT General Controls (ITGCs) using NIST standards and frameworks – to include NIST 800-53, NIST Cybersecurity Framework (CSF), and NIST Risk Management Framework (RMF). Leading and coaching Staff level team members. Leading IT testing procedures in accordance with Government standards (Generally Accepted Government Auditing Standards (GAGAS)) and other industry frameworks. Analyzing data and creating outputs that summarize client’s IT and cybersecurity posture. Serving Federal Government clients, Castro & Company is a dedicated Audit, Advisory and Information Technology firm headquartered in Alexandria, Virginia. We are dedicated to helping our clients accomplish their strategic goals while providing our people with a diverse and inclusive environment to thrive and succeed. Castro & Company employees are part of a learning culture with challenging career development opportunities. We encourage teamwork and collaboration, reward excellence, and respect and value diversity. Castro & Compan y is an Equal Opportunity Employer and considers all qualified applicants without regard to color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability and any other classification protected by law.

Requirements

• Bachelor’s Degree in IT and business-related field
• Must have a minimum of 2-year experience with related work performing IT testing in support of a financial statement audit, SOC 1 type 2 examination and/or FISMA Audit).
• Must have experience leading IT control walkthrough s and documenting IT audit work papers, and audit deliverables.
• Must have experience and strong desire coaching and developing Staff team members.
• Must thrive in a fast-paced environment while maintaining a strong attention to details.
• Must be able to multi-task various tasks with various deadlines.
• Strong proficiency in Microsoft Office (Excel, PowerPoint, and Word) along with experience in Microsoft PowerApps or other automated tools is preferred.
• Security Clearance: Must be able to pass a basic government suitability check (US Citizenship required).

Nice To Haves

• CISA/CISSP preferred.
• Strong proficiency in Microsoft Office (Excel, PowerPoint, and Word) along with experience in Microsoft PowerApps or other automated tools is preferred.

Responsibilities

• Support FISCAM/FISMA Audit, and Service Organization Control Report – SOC 1 Type 2 readiness engagements by completing assigned engagement tasks within the project scope and budget, while meeting deliverable requirements.
• Leading client meetings and coordination/oversight with action items.
• Evaluating IT General Controls (ITGCs) using NIST standards and frameworks – to include NIST 800-53, NIST Cybersecurity Framework (CSF), and NIST Risk Management Framework (RMF).
• Leading and coaching Staff level team members.
• Leading IT testing procedures in accordance with Government standards (Generally Accepted Government Auditing Standards (GAGAS)) and other industry frameworks.
• Analyzing data and creating outputs that summarize client’s IT and cybersecurity posture.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level