Audit Specialist – Cyber Security (Mid-Level)

ASSYST, Inc.; Baltimore (MD); On-site; USD 80,000 - 110,000; Full time

Job summary

ASSYST, Inc. seeks a mid-level Audit Specialist – Cyber Security to support our Federal Program. You will liaise between external auditors and internal security systems, conduct compliance checks, and assess documents for complex reports within cross-functional teams.

Responsibilities include developing audit reports, tracking POAMs, performing vulnerability assessments, and coordinating artifacts for ad-hoc audits across multiple stakeholders, aligning with FISMA/NIST requirements.

Qualifications

• 3–5 years of experience in IT Audit / Cyber Security supporting Federal programs.
• Experience in information security, policy and risk management, auditing and audit management.
• Familiarity with the Risk Management Framework, NIST 800-53, Vulnerability Analysis, FISMA and FedRAMP.
• CISA Certification preferred.
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.

Responsibilities

• Work liaison between external auditors and internal security systems.
• Conduct compliance checks and vulnerability assessments for internal teams ensuring adherence to FISMA / NIST Framework.
• Identify, define, and assess documents for complex system reports and technical requirements within cross functional teams.
• Develop and assess reports for audit project metrics, status reports, risk logs, POAM creation and lessons learned per audit.
• Conduct Data Calls and compliance checks for various audits and projects for security systems.
• Coordinate preliminary investigations to acquire artifacts for all requests associated with various ad-hoc audits across multiple stakeholders.
• Audits for FISMA-A123 and CFO performance.
• Enter data into Governance, Risk, and Compliance tools for audits and system reports for current and future fiscal year.

Job description

ASSYST’s Information Assurance and Cyber Security Practice is seeking a mid-level (Audit Specialist – Cyber Security) to support our Federal Program.

Responsibilities:

• Work liaison between external auditors and internal security systems.
• Conduct compliance checks and vulnerability assessments for internal teams assuring adherence to FISMA / NIST Framework.
• Identify, define, and assess documents for complex system reports and technical requirements within cross functional teams.
• Develop and assess reports for audit Project metrics, status reports, risk logs, POAM creation and lessons learned per Audit.
• Conduct Data Calls and compliance checks for various audits and projects for security systems.
• Working alongside system owners, ISSO, and CRA oversight.
• Track all deliverables, report regularly on control exceptions and deficiencies per system, ensure that measures raised in assessments are implemented following risk profiles, and address the root causes of risks using NIST guidelines.
• Coordinate preliminary investigations to acquire artifacts for all requests associated with various ad-hoc audits across multiple stakeholders (system owners) and organizations.
• Audits for FISMA-A123 and CFO just to name a few.
• Perform data entry into client’s Governance, Risk, and Compliance tools for audits and system reports for the current and future fiscal year.

Required Qualifications:

• 3-5 experience in a similar position focused on IT Audit/ Cyber Security supporting Federal programs
• Experience in information security, policy and risk management, auditing, and audit management
• Familiarity with the Risk Management Framework, NIST 800-53, Vulnerability Analysis, FISMA and FedRAMP.
• CISA Certification (Certified Information Systems Auditor) preferred
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities

ASSYST is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, disability, military status, national origin or any other characteristic protected under federal, state, or applicable local law