Federal Cyber Security Audit Specialist

ASSYST, Inc.; Baltimore (MD); On-site; USD 80,000 - 110,000; Full time

Job summary

ASSYST, Inc. seeks a mid-level Audit Specialist – Cyber Security to support our Federal Program. You will liaise between external auditors and internal security systems, conduct compliance checks, and assess documents for complex reports within cross-functional teams.

Responsibilities include developing audit reports, tracking POAMs, performing vulnerability assessments, and coordinating artifacts for ad-hoc audits across multiple stakeholders, aligning with FISMA/NIST requirements.

Qualifications

• 3–5 years of experience in IT Audit / Cyber Security supporting Federal programs.
• Experience in information security, policy and risk management, auditing and audit management.
• Familiarity with the Risk Management Framework, NIST 800-53, Vulnerability Analysis, FISMA and FedRAMP.
• CISA Certification preferred.
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.

Responsibilities

• Work liaison between external auditors and internal security systems.
• Conduct compliance checks and vulnerability assessments for internal teams ensuring adherence to FISMA / NIST Framework.
• Identify, define, and assess documents for complex system reports and technical requirements within cross functional teams.
• Develop and assess reports for audit project metrics, status reports, risk logs, POAM creation and lessons learned per audit.
• Conduct Data Calls and compliance checks for various audits and projects for security systems.
• Coordinate preliminary investigations to acquire artifacts for all requests associated with various ad-hoc audits across multiple stakeholders.
• Audits for FISMA-A123 and CFO performance.
• Enter data into Governance, Risk, and Compliance tools for audits and system reports for current and future fiscal year.

Job description

ASSYST, Inc. seeks a mid-level Audit Specialist – Cyber Security to support our Federal Program. You will liaise between external auditors and internal security systems, conduct compliance checks, and assess documents for complex reports within cross-functional teams.

Responsibilities include developing audit reports, tracking POAMs, performing vulnerability assessments, and coordinating artifacts for ad-hoc audits across multiple stakeholders, aligning with FISMA/NIST requirements.