Information Systems Auditor- Shiloh IL

Silverthorne Advisory Group LLC; United States; Vor Ort; USD 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Health benefits

401(k) retirement plan with company-m

Paid time off

Performance bonuses

Professional development support

Company events

Zusammenfassung

Silverthorne Advisory Group is seeking an Information Systems Auditor (CISA Preferred) to support defense sector opportunities. You will evaluate IT controls, cybersecurity safeguards, governance processes, and enterprise risk management while supporting federal financial management and audit readiness.

The role involves ITGCs, application controls, data analytics, and collaboration with cyber, IT, finance, and external auditors to identify risks and strengthen internal controls, with

Qualifikationen

• Minimum of 3 years of experience in IT auditing, information security, cybersecurity, technology risk management, internal audit, or technology consulting.
• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Information Technology, or related field.
• U.S. citizenship and an active Secret security clearance. Clearance sponsorship may be available for qualified candidates.
• Experience performing IT General Controls (ITGC) testing and technology risk assessments.
• Knowledge of NIST, COBIT, COSO, and other control frameworks.
• Experience evaluating access controls, change management, configuration management, and backup/recovery controls.
• Strong analytical, communication, and problem-solving skills.

Aufgaben

• Plan, execute, and document risk-based information systems audits and technology risk assessments.
• Evaluate ITGCs, application controls, automated processes, and financial system controls.
• Assess cybersecurity safeguards, IAM, data protection, and privileged access controls.
• Identify control deficiencies, security gaps, and remediation opportunities.
• Prepare audit workpapers, findings, and recommendations; communicate results to stakeholders.
• Track corrective actions and validate remediation efforts.

Kenntnisse

IT auditing

Risk assessment

Cybersecurity knowledge

Data analytics

Stakeholder communication

Problem solving

Ausbildung

Bachelor's degree

Tools

Power BI

SQL

Python

Microsoft Azure

AWS

Jobbeschreibung

Information Systems Auditor (CISA Preferred)

Company: Silverthorne Advisory Group
Location: Scott Air Force Base, IL (On-site)
Clearance Requirement: Active Secret Clearance (Sponsorship Available)
Experience Level: 3+ Years
Employment Type: Full-Time/ Salaried

About the Role

Silverthorne Advisory Group is seeking an Information Systems Auditor (CISA Preferred) to support growing opportunities within the Defense sector. The successful candidate will evaluate information technology controls, cybersecurity safeguards, governance processes, and enterprise risk management programs while supporting federal financial management, audit readiness, and digital modernization initiatives.
In this role, you will perform risk-based IT audits, assess the effectiveness of IT General Controls (ITGCs), application controls, and cybersecurity controls, and develop recommendations to strengthen security, compliance, and operational efficiency. You will work closely with cybersecurity professionals, IT teams, finance organizations, business stakeholders, and external auditors to identify technology risks and improve internal controls.
This position offers an opportunity to combine information systems auditing, cybersecurity, data analytics, and emerging artificial intelligence capabilities in support of high-impact federal and Defense missions.

Key Responsibilities

• Plan, execute, and document risk-based information systems audits and technology risk assessments.
• Evaluate IT General Controls (ITGCs), application controls, automated business processes, and financial system controls.
• Assess cybersecurity safeguards, identity and access management, data protection, and privileged access controls.
• Identify control deficiencies, security vulnerabilities, compliance gaps, and opportunities for risk mitigation.
• Prepare audit workpapers, document findings, develop recommendations, and communicate results to stakeholders.
• Track corrective actions and validate remediation efforts to ensure identified issues are addressed.
• Support compliance with applicable federal regulations, cybersecurity standards, and audit frameworks, including NIST, FISMA, COBIT, FISCAM, and FedRAMP.
• Review change management, configuration management, backup and recovery, disaster recovery, and business continuity controls.
• Evaluate security controls across cloud environments, enterprise applications, databases, and IT infrastructure.
• Assess logging and monitoring, incident response, vulnerability management, and security operations practices.
• Support internal and external audits, compliance assessments, and regulatory examinations.
• Collaborate with IT, cybersecurity, finance, and business teams to strengthen governance, internal controls, and audit readiness.
• Identify opportunities to leverage data analytics, automation, and artificial intelligence to improve audit testing and operational efficiency.
• Stay informed about evolving cybersecurity threats, regulatory requirements, and industry best practices.

Required Qualifications

• Minimum of 3 years of experience in IT auditing, information security, cybersecurity, technology risk management, internal audit, or technology consulting.
• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Information Technology, or a related field.
• U.S. citizenship and an active Secret security clearance. Clearance sponsorship may be available for qualified candidates.
• Experience performing IT General Controls (ITGC) testing and technology risk assessments.
• Knowledge of relevant control frameworks and standards, including NIST Cybersecurity Framework, NIST SP 800-53, NIST SP 800-171, COBIT, COSO, and FISCAM.
• Experience evaluating logical access, identity and access management, change management, configuration management, and backup and recovery controls.
• Understanding of cybersecurity principles, internal controls, compliance requirements, and enterprise risk management.
• Experience documenting audit procedures, preparing findings, and developing actionable recommendations.
• Strong analytical, problem-solving, organizational, and written and verbal communication skills.
• Ability to manage multiple priorities, work independently, and collaborate effectively in a fast-paced consulting environment.

Preferred Qualifications

• Certified Information Systems Auditor (CISA) certification.
• Experience supporting Department of War (DoW), federal civilian, or Intelligence Community clients.
• Familiarity with FISMA, FedRAMP, the Risk Management Framework (RMF), CMMC 2.0, GAO Green Book, and OMB Circular A-123.
• Experience assessing cloud environments, including Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP).
• Familiarity with enterprise security and business platforms such as Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID, Microsoft Intune, ServiceNow, SAP, Oracle, or Workday.
• Experience with data analytics, SQL, Power BI, Python, PowerShell, or audit automation tools.
• Additional certifications such as CISSP, CISM, CRISC, CIA, CPA, CGFM, Security+, or PMP.
• Experience supporting SOC 1, SOC 2, ISO 27001, PCI DSS, HIPAA, or SOX compliance initiatives.
• Experience leading audit engagements, mentoring junior team members, or presenting findings to senior leadership.
• Strong consulting, stakeholder management, and client relationship skills.

Benefits and Professional Development

• Health Benefits: Medical, dental, and vision insurance for employees and eligible family members.
• 401(k) Retirement Plan: 100% company match on employee contributions up to the first 6%, with access to Vanguard Admiral funds.
• Paid Time Off: Generous paid leave based on length of service.
• Performance Bonuses: Opportunities to earn bonuses based on individual performance and achievement of company goals.
• Professional Development: Support for training, continuing education, and professional certifications.
• Company Events: Team-building activities, company retreats, and professional conferences.

About Silverthorne Advisory Group

Silverthorne Advisory Group provides consulting services supporting federal and Defense missions. Our team helps clients strengthen financial management, improve operational performance, enhance audit readiness, and advance modernization initiatives through practical solutions and emerging technologies.