What are the responsibilities and job description for the Certified Information Systems Auditor (CISA) - Level II - Hybrid Ft. Belvoir position at Biz First?
Job Description
Certified Information Systems Auditor (CISA) - Level II - Hybrid Ft. Belvoir
BizFirst is assisting our client with recruiting a Full-time Certified Information Systems Auditor (CISA) - Level II. This position involves a hybrid work schedule, with 2 days onsite and 3 days remote each week at the Defense Technical Information Center (DTIC) at Fort Belvoir. Our client is a boutique consulting firm that employs consultants and professionals with unique skill sets to support the federal government with strategic execution, financial process enablement, IT systems, and Enterprise Resource Planning (ERP) software implementation.
Interim Secret Clearance or Higher Required
What will you do
In this role, you will perform comprehensive audits of complex computer information systems, ensuring their security, reliability, and compliance with governmental standards. You will work closely with various teams to validate Key Risk Indicators (KRIs) and IT General Controls (ITGCs), while providing expert guidance and support to our clients.
Responsibilities :
- Conduct general and application control reviews for both simple and complex computer information systems, including areas such as backup and disaster recovery, system development standards, system security, programming and communication controls, operating procedures, and system maintenance.
- Develop and maintain computerized audit software and follow up on audit findings to ensure corrective actions have been taken.
- Perform detailed evaluations of internal controls and consult with clients on operational issues related to their computer information systems.
- Assess the design and operational effectiveness of KRIs and ITGCs, and provide guidance on testing methodology, validation processes, adherence to policy, and documentation.
- Design, develop, and publish materials to support adherence to established KRI / ITGC validation processes.
- Collaborate with other teams, including Risk, IT, and Information Security, to report, track, and follow up on remediation plans
- Verify that information technology systems and infrastructure are secure and support the related applications.
- Create and deliver presentations to management, discuss audit findings and conclusions, and recommend remediation actions.
- Perform follow-ups with clients to ensure the implementation of remediation actions.
- Advise clients on maintaining compliance with government standards and guide them through various improvement and modernization initiatives.
- Prepare background papers, briefings, speeches, and create web and portal content to support organizational messaging activities.
- Support customers in the development, implementation, and maintenance of strategy, doctrine, standards, policies, and procedures.
Requirements :
Benefits :
Job Type :
Work Authorization / Clearance :
Work Location :