Part-Time IT QA Auditor: Secure SDLC & Multi-Vendor Oversight

New York City Police Department; New York (NY); On-site; USD 90,000 - 130,000; Full time

Job summary

The New York City Police Department is seeking an IT Quality Assurance Auditor within the Strategic Technology Division to oversee application and product delivery quality across enterprise systems. The role emphasizes secure SDLC practices, governance, and cross-team coordination.

The candidate will audit programs, validate test strategies and release processes while ensuring compliance with security standards and reporting trends for continuous improvement.

Qualifications

• Four years of satisfactory full-time experience in the area with specialization in a relevant technology, process or domain.
• Bachelor’s degree with four years required in computer-related field and a relevant specialization.
• Alternate education/experience equivalent to the listed requirements.

Responsibilities

• Audit large programs across multiple divisions and vendors for Agile/hybrid methodology compliance, governance, and standardization.
• Conduct regular user access audits across enterprise applications to ensure permissions align with job status and policies.
• Ensure CI/CD pipelines enforce security policies and automated testing.
• Review CI/CD pipelines, repos, and configurations for secure coding and SSDLC adherence.

Skills

DevSecOps

CSSLP

PMP

CISA

NIST

FedRAMP

SOC 2

Azure DevOps

Cloud security

Agile

Test automation

QA validation

Analytics reporting

Education

Bachelor degree in CS/Engineering/HCI

Associate degree in CS/Engineering/HCI

Eight years related experience equivalency

Tools

Azure DevOps

Job description

The New York City Police Department is seeking an IT Quality Assurance Auditor within the Strategic Technology Division to oversee application and product delivery quality across enterprise systems. The role emphasizes secure SDLC practices, governance, and cross-team coordination.

The candidate will audit programs, validate test strategies and release processes while ensuring compliance with security standards and reporting trends for continuous improvement.