FISMA & IT Compliance Audit Consultant

Ampcus, Inc; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Job summary

Ampcus Inc. seeks a highly skilled IT compliance professional to support the Information Security & Privacy efforts for annual FISMA audits. The contractor will validate current policies, assist with remediation, and support ongoing IV&V assessments and audit activities.

Ideal candidates will have ten+ years in IT roles (auditing/security), strong communication and project management skills, and familiarity with NIST 800-series or FISMA standards. CISSP or CISA certification is highly desirable.

Qualifications

• Ten+ years of progressively responsible IT experience (auditing/security/management).
• Experience leading and developing audit and security documentation.
• Experience with cloud and on‑premise applications is desirable.
• CISSP or CISA certification strongly desired.
• Experience with NIST 800-series or FISMA compliance is preferred.

Responsibilities

• Evaluate, develop, maintain, and update the technology compliance program.
• Advise technology managers on compliance, information security, and internal controls.
• Prepare technology departments for yearly FISMA audits.
• Develop documents for internal FISMA reviews.
• Design and implement audit mechanisms to detect non‑compliance.
• Provide weekly status reports documenting concerns, risks, and progress.
• Crosswalk evidence against CISA and FedRAMP standards and document results.
• Propose action plans to improve compliance and security practices.

Skills

IT auditing

Information security

Project management

Written communication

Analysis

Job description

Ampcus Inc. seeks a highly skilled IT compliance professional to support the Information Security & Privacy efforts for annual FISMA audits. The contractor will validate current policies, assist with remediation, and support ongoing IV&V assessments and audit activities.

Ideal candidates will have ten+ years in IT roles (auditing/security), strong communication and project management skills, and familiarity with NIST 800-series or FISMA standards. CISSP or CISA certification is highly desirable.