Mid-Level Audit/COOP Business Analyst

Chenega Professional Services Strategic Business Unit

Washington (District of Columbia)

Hybrid

USD 140,000 - 150,000

Full time

7 hours ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Medical

Dental

Vision

Prescription

Employee Assistance Program

Short- & Long-Term Disability

Life and AD&D Insurance

Flexible Spending Account

Health Savings Account

Health Reimbursement Account

Dependent Care Spending Account

Commuter Benefits

401k / 401a

Job summary

Chenega Services & Federal Solutions, LLC, a Chenega Professional Services company, seeks a Mid-Level Audit/COOP Business Analyst to support FHFA audits, COOP, and related IT/cybersecurity assessments. You will document procedures, analyze evidence, identify control weaknesses, and present findings to stakeholders in a hybrid work environment.

The role emphasizes planning and executing FISMA and OIG audits, developing test procedures, and tracking corrective actions, with opportunities to

Qualifications

Three to five years of federal IT audits, cybersecurity assessments, FISMA evaluations, OIG audits, COOP implementations or related compliance activities.
Experience maintaining audit documentation, workpapers, and supporting evidence.
Experience with disaster recovery planning, risk assessments, and business impact analyses, including DR tests and simulations.
Strong written and verbal communication skills.

Responsibilities

Support the planning, execution, and reporting of FISMA audits, OIG audits, information technology audits, and cybersecurity assessments.
Evaluate information security controls and assess compliance with FISMA, NIST guidance, FHFA policies, and federal cybersecurity requirements.
Collect, review, and maintain audit evidence, supporting documentation, and workpapers in accordance with federal audit standards.
Coordinate with system owners, cybersecurity personnel, business stakeholders, and audit teams to obtain required documentation and evidence.
Assist in developing audit programs, test procedures, risk assessments, and evaluation methodologies.
Track audit findings, recommendations, corrective actions, and POA&Ms through remediation and closure.
Prepare status reports, briefing materials, dashboards, and executive-level summaries of audit activities.

Skills

Analytical skills

Communication skills

Problem-solving

Auditing knowledge

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Accounting, Business Administration, or related field

Tools

GRC platforms

Job description

Summary Come join a company that strives for Extraordinary People and Exceptional Performance!

Chenega Services & Federal Solutions, LLC, a Chenega Professional Services’ company, is looking for a Mid-Level Audit/COOP Business Analyst to support the Federal Housing Finance Agency (FHFA) audit, assessment and continuity of operations (COOP) activities by evaluating information technology systems, cybersecurity controls, and business processes. This position supports Federal Information Security Modernization Act (FISMA) audits, Office of Inspector General (OIG) audits, information technology control assessments, implementation of COOP and remediation tracking activities. The analyst is responsible for documenting audit procedures, analyzing technical and operational evidence, identifying control weaknesses, and communicating findings and recommendations to stakeholders.

Our company offers employees the opportunity to join a team where there is a robust employee benefits program, management engagement, quality leadership, an atmosphere of teamwork, recognition for performance, and promotion opportunities. We actively strive to channel our highly engaged employee’s knowledge, critical thinking, and innovative solutions for our clients.

Responsibilities

Support the planning, execution, and reporting of FISMA audits, OIG audits, information technology audits, and cybersecurity assessments.
Evaluate information security controls and assess compliance with FISMA, NIST guidance, FHFA policies, and federal cybersecurity requirements.
Collect, review, and maintain audit evidence, supporting documentation, and workpapers in accordance with federal audit standards.
Coordinate with system owners, cybersecurity personnel, business stakeholders, and audit teams to obtain required documentation and evidence.
Assist in developing audit programs, test procedures, risk assessments, and evaluation methodologies.
Track audit findings, recommendations, corrective actions, and Plans of Action and Milestones (POA&Ms) through remediation and closure.
Prepare status reports, briefing materials, dashboards, and executive-level summaries of audit activities and remediation efforts.
Participate in interviews, walkthroughs, control testing, and validation activities.
Communicate audit results and recommendations clearly to technical and non-technical audiences.
Maintain awareness of emerging cybersecurity threats, federal audit standards, and industry best practices.
Assist senior auditors and project leadership in the execution of contract deliverables and customer support activities.
Develop and Execute Disaster Recovery Tests and Simulations: Develop and execute disaster recovery tests and simulations to validate the effectiveness of DR plans and procedures.
Implement and Manage Backup Strategies: Implement and manage backup strategies to ensure that data is regularly backed up and can be restored effectively.
Oversee Data and System Restoration: Oversee the restoration of data and systems from backups in the event of a disaster or data loss incident.
Maintain Detailed Documentation: Create and maintain detailed documentation of disaster recovery plans, processes, and procedures.
Continuously Review and Improve DR Strategies: Continuously review and improve DR strategies and procedures to ensure they remain effective and up-to-date.

Qualifications

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Accounting, Business Administration, or a related field.
Three (3) to five (5) years of experience supporting federal IT audits, cybersecurity assessments, FISMA evaluations, OIG audits, COOP implementations or related compliance activities.
Experience maintaining audit documentation, workpapers, and supporting evidence.
Experience with disaster recovery planning, risk assessments, and business impact analyses, including the development and execution of disaster recovery tests and simulations.
Strong written and verbal communication skills.
Ability to obtain and maintain a Public Trust clearance.

Preferred Qualifications

Certified Information Systems Auditor (CISA).
Certified Information Systems Security Professional (CISSP).
Certified Information Security Manager (CISM).
Experience reviewing Service Organization Control (SOC) reports.
Experience using Governance, Risk, and Compliance (GRC) platforms or audit management tools.
Experience developing executive-level dashboards and reporting metrics.
Familiarity with cybersecurity continuous monitoring programs.

Knowledge, Skills And Abilities

Ability to analyze large datasets and identify risks, trends, and control weaknesses.
Strong analytical, organizational, and problem-solving skills.
Ability to prepare professional reports, presentations, audit documentation, and briefing materials.
Ability to communicate technical concepts effectively to both technical and non-technical audiences.
Ability to manage multiple assignments and meet established deadlines.
Proficiency with Microsoft Office Suite, including Excel, Word, PowerPoint, Outlook, and Teams.
Ability to work independently and collaboratively in a hybrid work environment.
Ability to maintain professionalism and confidentiality while handling sensitive information.

Final salary determination based on skill-set, qualifications, and approved funding.

Paid Time Off