Information Systems Auditor (CISA) - Secret Clearance

LaunchCode; Shiloh (IL); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

401(k) with match

Generous PTO

Bonuses

Professional development

Company retreats

Job summary

LaunchCode is facilitating a position with one of our partner organizations for an Information Systems Auditor role. The successful candidate will lead risk-based IT audits, assess ITGCs and cybersecurity controls, and collaborate with IT, cybersecurity, finance, and audit teams in defense-sector engagements.

The ideal candidate has 10+ years in IT audit or information security, CISA certification, and an active Secret clearance. This role requires U.S. citizenship and immediate hiring timelines.

Qualifications

• CISA certification.
• 10+ years of IT audit or information security experience.
• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, IT, or related discipline.
• U.S. Citizenship with an active Secret Clearance.

Responsibilities

• Lead a team of junior staff and ensure delivery of audits.
• Plan, execute, and document risk-based IT audits.
• Evaluate ITGCs, application controls, and automated processes.
• Assess cybersecurity, IAM, data protection, and access controls.
• Perform technology risk assessments and identify gaps.
• Test security, operational, and financial controls.
• Develop audit workpapers, findings, and executive reports.
• Validate corrective actions and monitor remediation to closure.
• Ensure compliance with NIST, COBIT, ISO 27001, FISMA, CMMC, SOX, FedRAMP and related frameworks.
• Participate in internal/external audits and regulatory examinations.
• Evaluate cloud environments, databases, and infrastructure security.

Skills

IT audit experience

Information security

Cybersecurity

Risk management

Regulatory frameworks

Education

Bachelor's degree in Information Systems / related field

Tools

NIST SP 800-53

NIST Cybersecurity Framework

COBIT

ISO 27001

FISMA / SOX / CMA

Job description

Pay: $100,000-$150,000/year

Years of Experience Required: 10+ years

Clearance: Active Secret Clearance required

Hiring Timeline: Immediate

Company: The name of our partner organization will be disclosed during the interview process. This is not a direct role with LaunchCode; it is a position through LaunchCode, working with one of our partner companies.

Disclaimer: We are unable to provide work sponsorship for this role. U.S. Citizenship and an active Secret Clearance are required for this position.

Position Overview

Our partner is seeking an Information Systems Auditor to evaluate information technology controls, cybersecurity safeguards, governance processes, and enterprise risk management programs supporting Defense sector clients. The successful candidate will lead a team in performing risk-based IT audits, assessing IT General Controls (ITGCs), application controls, cybersecurity controls, and technology risks, while providing recommendations to strengthen security, compliance, and operational efficiency.

This role combines information systems auditing, cybersecurity, data analytics, and emerging technologies while working closely with IT, cybersecurity, finance, business, and audit teams. The ideal candidate has strong experience in IT audit and risk management, excellent communication skills, and the ability to lead audit engagements and mentor junior staff.

Position Responsibilities

• Lead a team of junior staff and ensure completion of technical and functional deliverables.
• Plan, execute, and document risk-based information systems audits.
• Evaluate IT General Controls (ITGCs), application controls, and automated business processes.
• Assess cybersecurity, identity and access management, and data protection controls.
• Perform technology risk assessments and identify control gaps, vulnerabilities, and compliance risks.
• Conduct testing of security, operational, and financial system controls.
• Develop audit workpapers, findings, recommendations, and executive-level reports.
• Validate corrective actions and monitor remediation efforts through completion.
• Support compliance with NIST, COBIT, ISO 27001, FISMA, CMMC, SOX, FedRAMP, and other regulatory frameworks.
• Participate in internal and external audits, assessments, and regulatory examinations.
• Evaluate cloud environments, enterprise applications, databases, and infrastructure security controls.
• Assess change management, configuration management, backup, disaster recovery, and business continuity processes.
• Review logging, monitoring, incident response, vulnerability management, and privileged access management practices.
• Analyze technology risks associated with cloud computing, automation, artificial intelligence, and other emerging technologies.
• Collaborate with cybersecurity, engineering, finance, and business stakeholders to improve governance and internal controls.
• Identify opportunities to improve audit methodologies, automate testing procedures, and enhance operational efficiency.
• Stay current on evolving cybersecurity threats, regulatory requirements, and industry best practices.
• Required Skills/Experience:
• CISA certification.
• 10+ years of experience in IT audit, information security, cybersecurity, risk management, internal audit, or technology consulting.
• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Information Technology, or a related discipline.
• U.S. Citizenship with an active Secret Clearance.
• Experience performing IT General Controls (ITGC) testing and technology risk assessments.
• Knowledge of NIST Cybersecurity Framework, NIST SP 800-53, NIST SP 800-171, COBIT, COSO, and FISCAM.
• Experience evaluating identity and access management, change management, logical access, backup and recovery, and configuration management controls.
• Strong understanding of cybersecurity principles, security controls, and enterprise risk management.
• Experience developing audit reports, documenting findings, and communicating recommendations to stakeholders.
• Excellent analytical, problem-solving, organizational, and written communication skills.
• Ability to manage multiple projects and work independently in a fast-paced environment.
• Desired Skills/Experience:
• Experience supporting federal civilian, Department of War, or Intelligence Community clients.
• Knowledge of FISMA, FedRAMP, RMF, CMMC 2.0, GAO Green Book, and OMB Circular A-123.
• Experience with cloud platforms such as Microsoft Azure, AWS, or GCP.
• Familiarity with Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID, Microsoft Intune, ServiceNow, SAP, Oracle, or Workday.
• Experience with data analytics, SQL, Power BI, Python, PowerShell, or audit automation tools.
• Professional certifications such as CISSP, CISM, CRISC, CIA, CPA, CGFM, Security+, or PMP.
• Experience supporting SOC 1, SOC 2, ISO 27001, PCI DSS, HIPAA, or SOX compliance initiatives.
• Experience leading audit engagements, mentoring junior staff, and presenting to executive leadership.
• Strong consulting, stakeholder management, and client relationship skills.
• Healthcare - Health, Vision, and Dental Plans are available for employees and their families.
• Retirement Plan - Competitive 401(k) plan with 100% matching on employee contributions up to the first 6%, with access to Vanguard Admiral funds.
• Paid Time Off - Generous paid leave based on length of service.
• Bonus System - Bonuses are available to employees who meet and exceed goals throughout the year.
• Professional Development - Support for career growth through training programs and certifications.
• Company Retreats & Team Events - Sponsored trips, team-building activities, and annual conferences related to your skillset.