FISMA Compliance Audit Consultant — Remote/Hybrid

System One; Washington; On-site; USD 90,000 - 130,000; Full time

Job summary

System One is seeking an experienced FISMA External Audit Consultant in Washington, DC. This contract role can be remote or hybrid, with a focus on compliance, policy development, and audit readiness for annual FISMA reviews.

The ideal candidate will bring 10+ years in IT auditing or security, CISSP or CISA certification, and practical experience with NIST 800-series controls and government-related auditing standards.

Qualifications

• Ten plus years in IT auditing, security, or related fields.
• Experience with cloud and on‑premise apps is desirable.
• Strong documentation, policy development, and controls testing skills.
• Familiarity with NIST 800 series and FISMA guidance.

Responsibilities

• Develop and maintain technology compliance programs and policies.
• Prepare documentation for annual FISMA audits and IV&V efforts.
• Identify vulnerabilities and design remediation with the team.
• Provide status updates, risk assessments, and audit findings.

Skills

IT audit

Information security

Verbal & written communication

Project management

Education

CISSP

CISA

Tools

NIST 800 series

FISMA framework

Job description

System One is seeking an experienced FISMA External Audit Consultant in Washington, DC. This contract role can be remote or hybrid, with a focus on compliance, policy development, and audit readiness for annual FISMA reviews.

The ideal candidate will bring 10+ years in IT auditing or security, CISSP or CISA certification, and practical experience with NIST 800-series controls and government-related auditing standards.