Senior FISMA Auditor & ISCM Expert

Saliense; McLean (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

PTO + Sick Time

Health Insurance

401(k) with match

Parental Leave

Professional Development

Job summary

Saliense is seeking a Senior Information Security Auditor in Virginia to lead federal cybersecurity audits, evaluate ISCM maturity, and provide independent assessments for FISMA readiness.

Required are 10+ years in information systems auditing, CISA certification, and a strong track record delivering executive-level dashboards and remediation plans. You will mentor teams and drive continuous process improvements across the organization.

Qualifications

• Active Certified Information Systems Auditor (CISA) certification required.
• Bachelor’s degree in Cybersecurity, Information Systems, Information Technology, Computer Science, Accounting, Business Administration, Risk Management, or related discipline.
• Minimum 10 years of experience in information systems auditing, federal cybersecurity, IT risk management, FISMA compliance, assessment and authorization, or related disciplines.
• Experience supporting or leading federal cybersecurity audits, FISMA evaluations, Inspector General reviews, or independent cybersecurity assessments.
• Experience developing executive-level reports, dashboards, and briefings for senior federal leadership.

Responsibilities

• Support organizational preparation for annual FISMA audits and evaluations through audit readiness reviews, evidence validation, documentation assessments, and gap identification.
• Coordinate responses to FISMA audit requests and facilitate interactions among system owners, ISSOs, ISSMs, cybersecurity teams, program managers, and external auditors.
• Analyze recurring audit findings across multiple FISMA evaluation cycles and identify systemic deficiencies contributing to repeat observations.
• Assess organizational efforts to address FISMA findings and recommendations, including corrective action plans, remediation milestones, closure packages, and validation activities.
• Develop executive-level reports, dashboards, and briefings on FISMA readiness, audit results, remediation status, aging findings, and program risk.
• Evaluate the maturity and effectiveness of ISCM programs, including monitoring strategies, performance measures, risk reporting, vulnerability management integration, and management oversight.
• Analyze POA&M, assessment, and vulnerability management data to identify recurring findings, aging weaknesses, remediation trends, and enterprise risk patterns.
• Evaluate cybersecurity metrics, KPIs, dashboards, and management reporting processes for accuracy and alignment with objectives.
• Perform portfolio-level analyses to identify enterprise-wide trends, systemic risks, and opportunities for improvement.
• Brief senior executives regarding recurring findings, aging POA&Ms, emerging risks, remediation impediments, and strategic program improvements.
• Provide technical leadership, mentoring, and quality reviews of audit methodologies, analyses, findings, reports, and other deliverables.

Skills

IS auditing

FISMA compliance

Executive reporting

Cybersecurity risk management

Leadership/mentoring

Education

Bachelor’s degree in Cybersecurity, Information Systems, IT, CS, Accounting, or related discipline

CISA certification

Job description

Saliense is seeking a Senior Information Security Auditor in Virginia to lead federal cybersecurity audits, evaluate ISCM maturity, and provide independent assessments for FISMA readiness.

Required are 10+ years in information systems auditing, CISA certification, and a strong track record delivering executive-level dashboards and remediation plans. You will mentor teams and drive continuous process improvements across the organization.