CISA-Ready IS Auditor for Federal Defense (On-Site)

Silverthorne Advisory Group; Shiloh (IL); On-site; USD 90,000 - 140,000; Full time

Benefits offered by this job

Health benefits

401(k) matching

Paid time off

Performance bonuses

Professional development

Company events

Job summary

Silverthorne Advisory Group is seeking an Information Systems Auditor (CISA Preferred) to support defense-sector opportunities. The role requires evaluating IT controls, cyber safeguards, governance, and risk management, ensuring readiness for federal audits and modernization initiatives.

You will conduct risk-based IT audits, assess ITGCs, application controls, and cybersecurity controls, and collaborate with IT, cybersecurity, and finance teams to strengthen internal controls and audit

Qualifications

• 3+ years IT auditing or related field.
• Active Secret clearance required; sponsorship may be available.
• Experience with ITGC testing and risk assessments.

Responsibilities

• Plan, execute, and document risk-based information systems audits and technology risk assessments.
• Evaluate IT General Controls (ITGCs), application controls, automated business processes, and financial system controls.
• Assess cybersecurity safeguards, identity and access management, data protection, and privileged access controls.
• Identify control deficiencies, security vulnerabilities, compliance gaps, and opportunities for risk mitigation.
• Prepare audit workpapers, document findings, develop recommendations, and communicate results to stakeholders.
• Track corrective actions and validate remediation efforts to ensure identified issues are addressed.
• Support compliance with applicable federal regulations, cybersecurity standards, and audit frameworks, including NIST, FISMA, COBIT, FISCAM, and FedRAMP.

Skills

IT auditing

Information security

Risk management

Communication

Analytical skills

Attention to detail

Education

Bachelor's degree in IS/CS/Cybersecurity

Tools

SQL

Power BI

Python

Audit automation tools

Job description

Silverthorne Advisory Group is seeking an Information Systems Auditor (CISA Preferred) to support defense-sector opportunities. The role requires evaluating IT controls, cyber safeguards, governance, and risk management, ensuring readiness for federal audits and modernization initiatives.

You will conduct risk-based IT audits, assess ITGCs, application controls, and cybersecurity controls, and collaborate with IT, cybersecurity, and finance teams to strengthen internal controls and audit