SHINE Systems is seeking an IT Auditor and Subject Matter Expert to provide IT audit liaison activities and provide advice to a mix of government and contractor officials and conduct IT internal control testing over the business systems used to generate the agency financial statements.
Duties, Roles and Responsibilities Include:
Evaluate the design and effectiveness of IT controls across the suite of business systems
Conduct tests around financial system controls compliance, IT General Computer Controls and Application Controls, Access Controls and Configuration management controls
Review documents, records, reports and methods for accuracy and effectiveness
Conduct testing and prepare workpapers, write-ups, and memos
Hold preliminary discussions of apparent deficiencies with system owners and external auditor
Report audit findings and make recommendations for the correction of unsatisfactory conditions
Review corrective action plans identifying findings and provide recommendations
Liaise with external auditors and stakeholders during the annual IT audit
Educate stakeholder with what to expect and support a successful IT audit
Develop thorough and defendable remediation packages for Notices of Findings and Recommendations (NFRs)
Requirements & Desired:
U.S. citizenship
Current TS/SCI Security clearance
Current CI poly or eligibility to obtain CI poly
8 years of relevant experience with a bachelor's degree OR 6 years of relevant experience with a master's degree is required for consideration
One or more of the following certifications: CISA, CISM, CISSP, CRISC
Knowledge of Federal Information System Controls Audit Manual (FISCAM) preferred
Knowledge of OMB A-123 Management's Responsibility over Internal Controls
Knowledge of Generally Accepted Government Auditing Standards (GAGAS)
Knowledge of Federal Information Security Management Act (FISMA) preferred
Experience with National Institute of Standards and Technology (NIST) Federal Information Processing Standards (FIPS) and Special Publications (SP) preferred
Excellent analytical and organizational skills
Exceptional communication skills, both verbal and written
Proficiency with Microsoft Office (Word, Excel, PowerPoint)
Experience performing FISCAM, NIST, OMB Circular A-123 internal control, audit readiness, SSAE 16, and FISMA security reviews
Desired: