On-Site IS Auditor with Secret Clearance Sponsorship

Silverthorne Advisory Group; Shiloh (IL); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health Benefits

401(k) Retirement Plan

Paid Time Off

Performance Bonuses

Professional Development

Company Events

Job summary

Silverthorne Advisory Group seeks an Information Systems Auditor (CISA Preferred) to support federal and Defense missions. You will evaluate IT controls, cybersecurity safeguards, governance, and enterprise risk management while supporting audit readiness and modernization initiatives.

You will perform risk-based IT audits, assess ITGCs, application and security controls, and collaborate with IT, cybersecurity, finance, and business teams to strengthen governance and compliance.

Qualifications

• Minimum 3 years in IT auditing, information security, cybersecurity, technology risk management, internal audit, or technology consulting.
• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Information Technology, or related field.
• U.S. citizenship and an active Secret security clearance. Clearance sponsorship may be available for qualified candidates.
• Experience performing IT General Controls (ITGC) testing and technology risk assessments.
• Knowledge of relevant control frameworks and standards, including NIST Cybersecurity Framework, NIST SP 800-53, NIST SP 800-171, COBIT, COSO, and FISCAM.
• Experience evaluating logical access, identity and access management, change management, configuration management, and backup and recovery controls.
• Understanding of cybersecurity principles, internal controls, compliance requirements, and enterprise risk management.
• Experience documenting audit procedures, preparing findings, and developing actionable recommendations.
• Strong analytical, problem-solving, organizational, and written and verbal communication skills.
• Ability to manage multiple priorities, work independently, and collaborate effectively in a fast-paced consulting environment.

Responsibilities

• Plan, execute, and document risk-based information systems audits and technology risk assessments.
• Evaluate IT General Controls (ITGCs), application controls, automated business processes, and financial system controls.
• Assess cybersecurity safeguards, identity and access management, data protection, and privileged access controls.
• Identify control deficiencies, security vulnerabilities, compliance gaps, and opportunities for risk mitigation.
• Prepare audit workpapers, document findings, develop recommendations, and communicate results to stakeholders.
• Track corrective actions and validate remediation efforts to ensure identified issues are addressed.
• Support compliance with applicable federal regulations, cybersecurity standards, and audit frameworks, including NIST, FISMA, COBIT, FISCAM, and FedRAMP.
• Review change management, configuration management, backup and recovery, disaster recovery, and business continuity controls.
• Evaluate security controls across cloud environments, enterprise applications, databases, and IT infrastructure.
• Assess logging and monitoring, incident response, vulnerability management, and security operations practices.
• Support internal and external audits, compliance assessments, and regulatory examinations.
• Collaborate with IT, cybersecurity, finance, and business teams to strengthen governance, internal controls, and audit readiness.
• Identify opportunities to leverage data analytics, automation, and artificial intelligence to improve audit testing and operational efficiency.
• Stay informed about evolving cybersecurity threats, regulatory requirements, and industry best practices.

Skills

IT auditing

Information security

Risk management

Audit analytics

Strong communication

Education

Bachelor's degree

Tools

SQL

Power BI

Python

PowerShell

Audit automation tools

Job description

Silverthorne Advisory Group seeks an Information Systems Auditor (CISA Preferred) to support federal and Defense missions. You will evaluate IT controls, cybersecurity safeguards, governance, and enterprise risk management while supporting audit readiness and modernization initiatives.

You will perform risk-based IT audits, assess ITGCs, application and security controls, and collaborate with IT, cybersecurity, finance, and business teams to strengthen governance and compliance.