IT Audit Supervisor

Castro & Co.•Alexandria, VA

20h•$95,000 - $120,000

About The Position

Castro & Company is hiring an IT Audit Supervisor for its growing Advisory & Accounting practice. The role supervises IT audit engagements supporting federal clients, guides and develops audit teams, and advises client management. The supervisor plans and oversees IT/FISCAM and FISMA audits, evaluates IT general controls using federal standards and frameworks, reviews audit workpapers, identifies and communicates risks, supports audit findings, and reports on clients’ IT and cybersecurity posture. The role also manages multiple engagements and deadlines while maintaining client service.

Requirements

Bachelor’s degree in Information Systems, Cybersecurity, Accounting, or a related business field.
At least 4 years of experience performing IT audits or IT risk assessments, including IT testing supporting a financial statement audit and/or FISMA audit.
CISA or CISSP certification.
Hands-on experience conducting IT audits in a federal environment.
Experience leading IT audits, including walkthroughs and documentation of audit workpapers and deliverables.
Experience and strong desire to coach and develop Staff and Senior team members.
Strong understanding of risk management and internal controls across technical and administrative systems.
Excellent written and verbal communication skills, including the ability to clearly document and explain complex IT processes.
Ability to thrive in a fast-paced environment, multitask, meet multiple deadlines, and maintain strong attention to detail.
Strong proficiency in Microsoft Office, including Excel, PowerPoint, and Word.
Must be a U.S. citizen and able to pass a basic government suitability check.
Solid understanding of federal IT environments, including system architecture, security frameworks, and compliance standards.
Ability to assess and document administrative and technical controls across diverse platforms.

Nice To Haves

FISMA audit and/or IT audit experience supporting a financial statement audit, including reviewing Staff and Senior team members’ workpapers.
Experience with Microsoft PowerApps.
Experience auditing or working with mainframe systems, Microsoft environments (Active Directory, Windows Server, Azure), Amazon Web Services (AWS), and Oracle databases and ERP systems.

Responsibilities

Plan, coordinate, and oversee IT/FISCAM and FISMA audit engagements within project scope and budget and meet deliverable requirements.
Facilitate client walkthroughs and meetings, coordinate action items, and support executive-level briefings.
Evaluate IT general controls using NIST standards and frameworks, including NIST SP 800-53, the NIST Cybersecurity Framework, and the NIST Risk Management Framework.
Conduct IT and cybersecurity audits in accordance with Generally Accepted Government Auditing Standards (GAGAS).
Review staff- and senior-prepared workpapers for accuracy, completeness, and compliance with audit standards.
Analyze IT environments, identify control gaps, and communicate associated risks and recommendations.
Lead discussions supporting audit conclusions with evidence and detailed analysis.
Create outputs summarizing clients’ IT and cybersecurity posture.
Lead and coach Staff and Senior team members, providing technical direction and feedback.
Manage multiple engagements and deadlines while maintaining excellent client service.
Apply federal IT compliance frameworks and guidance, including FISCAM, NIST SP 800-53, and FISMA.