DoD RMF Information Security Auditor

CDW; United States; On-site; USD 140,000 - 175,000; Full time

Job summary

CDW is seeking a seasoned IT Auditor to independently conduct audits of complex information systems, applications, and enclaves, ensuring controls meet Federal and DoD standards and RMF guidance. You will evaluate security levels, protect assets, and support vulnerability assessment and risk management.

The role requires DoD clearance, experience with RMF, NIST SP 800-53, and eMASS, plus strong analytical skills and proficiency with Excel/Access.

Qualifications

• Three (3) years of experience with RMF and NIST SP 800-53.
• Two (2) years of experience with eMASS.
• Active DoD Secret clearance.
• Strong analytical and problem-solving skills.
• Experience weighing business needs against security concerns.
• Proficiency with Excel/Access and MS Office.

Responsibilities

• Independently perform IT audits on complex information systems, applications, and enclaves to ensure that appropriate controls exist, are correctly implemented, and that procedures are compliant with Federal and DOD standards.
• Conduct accurate evaluation of the level of security required.
• Perform all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.
• Work at the highest level of all phases of information systems auditing.
• Provide technical support in the areas of vulnerability assessment, risk assessment, network security, and security implementation.
• Provide technical evaluations of customer systems and assist with making security improvements.
• Conduct cybersecurity control validation exercises on classified and unclassified networks, applications, and systems to validate the effectiveness of current security measures.
• Weigh business needs against security concerns and analyze applied mitigations to evaluate whether they meet security requirements.

Skills

RMF familiarity

DOD 8500.2

NIST SP 800-53

Analytical skills

Security risk assessment

Network security

Tools

Excel

Access

Microsoft Office

Job description

CDW is seeking a seasoned IT Auditor to independently conduct audits of complex information systems, applications, and enclaves, ensuring controls meet Federal and DoD standards and RMF guidance. You will evaluate security levels, protect assets, and support vulnerability assessment and risk management.

The role requires DoD clearance, experience with RMF, NIST SP 800-53, and eMASS, plus strong analytical skills and proficiency with Excel/Access.