Senior Auditor – Government Compliance & IT Controls

Talentify; Rockville (MD); On-site; USD 120,000 - 143,000; Full time

Job summary

Savantage Solutions is seeking a Senior Auditor to join our professional services team supporting a government agency's financial management program. This individual contributor role focuses on audit compliance, control testing, and compliance activities across multiple regulatory frameworks.

The ideal candidate will apply expertise in IT general controls, NIST SP 800-53, and FISMA, partnering with cybersecurity and IA teams to ensure robust evidence and timely remediation.

Qualifications

• Secret Clearance required.
• 8+ years of auditing experience with 5+ years in DoW.
• Strong analytical and problem-solving abilities.
• Excellent communication and interpersonal skills.

Responsibilities

• Support audit and internal control efforts across applicable frameworks.
• Ensure IT general controls align with FISCAM and NIST guidance.
• Collaborate with cybersecurity and IA teams on remediation efforts.
• Identify control gaps in configurations, interfaces, and infrastructure.
• Coordinate audit walk-throughs and provide accurate program input.
• Develop audit documentation, including action plans and evidence.
• Track audit-related change requests to meet deadlines.
• Lead milestones for corrective action across control domains.
• Provide regular audit status updates to stakeholders.
• Maintain mapping to NIST SP 800-53 and FISMA documentation.

Skills

Secret Clearance

Auditing experience

DoW experience

Analytical skills

Communication skills

Education

Bachelor's degree

CPA, CIA, CISA, CFE, CGAP, CDFM, or CGFM Certification

Job description

Savantage Solutions is seeking a Senior Auditor to join our professional services team supporting a government agency's financial management program. This individual contributor role focuses on audit compliance, control testing, and compliance activities across multiple regulatory frameworks.

The ideal candidate will apply expertise in IT general controls, NIST SP 800-53, and FISMA, partnering with cybersecurity and IA teams to ensure robust evidence and timely remediation.