What are the responsibilities and job description for the IT Auditor position at SHINE Systems?
SHINE Systems is seeking an IT Auditor and Subject Matter Expert to provide IT audit liaison activities and provide advice to a mix of government and contractor officials and conduct IT internal control testing over the business systems used to generate the agency financial statements.
Duties, Roles and Responsibilities Include:
- Evaluate the design and effectiveness of IT controls across the suite of business systems
- Conduct tests around financial system controls compliance, IT General Computer Controls and Application Controls, Access Controls and Configuration management controls
- Review documents, records, reports and methods for accuracy and effectiveness
- Conduct testing and prepare workpapers, write-ups, and memos
- Hold preliminary discussions of apparent deficiencies with system owners and external auditor
- Report audit findings and make recommendations for the correction of unsatisfactory conditions
- Review corrective action plans identifying findings and provide recommendations
- Liaise with external auditors and stakeholders during the annual IT audit
- Educate stakeholder with what to expect and support a successful IT audit
- Develop thorough and defendable remediation packages for Notices of Findings and Recommendations (NFRs)
Requirements & Desired:
- U.S. citizenship
- Current TS/SCI Security clearance
- Current CI poly or eligibility to obtain CI poly
- 8 years of relevant experience with a bachelor's degree OR 6 years of relevant experience with a master's degree is required for consideration
- One or more of the following certifications: CISA, CISM, CISSP, CRISC
- Knowledge of Federal Information System Controls Audit Manual (FISCAM) preferred
- Knowledge of OMB A-123 Management's Responsibility over Internal Controls
- Knowledge of Generally Accepted Government Auditing Standards (GAGAS)
- Knowledge of Federal Information Security Management Act (FISMA) preferred
- Experience with National Institute of Standards and Technology (NIST) Federal Information Processing Standards (FIPS) and Special Publications (SP) preferred
- Excellent analytical and organizational skills
- Exceptional communication skills, both verbal and written
- Proficiency with Microsoft Office (Word, Excel, PowerPoint)
- Experience performing FISCAM, NIST, OMB Circular A-123 internal control, audit readiness, SSAE 16, and FISMA security reviews
