Senior Information Security Auditor — DoD RMF & Risk

CO1002 CDW Government, LLC; United States; On-site; USD 140,000 - 175,000; Full time

Job summary

CDW Government, LLC is seeking an IT Audit professional to independently perform audits on complex information systems, ensuring controls exist and comply with Federal and DoD standards. The role involves evaluating security levels and protecting assets across all phases of IS auditing.

You will support vulnerability risk assessment, network security, and security implementations, conduct cybersecurity control validation on classified and unclassified networks, and weigh business needs against

Qualifications

• Three (3) years of experience with DODI 8500.2 or NIST SP 800-53 and RMF principles.
• Two (2) years of experience with eMASS.
• Strong analytical and problem-solving skills for security issues.
• Proficiency in Microsoft Excel and Access; MS Office Suite (Word, PowerPoint).
• Strong skills implementing and configuring networks and network components.
• Experience weighing business needs against security concerns.
• Experience analyzing mitigations to meet security requirements.
• Active DoD Secret clearance.

Responsibilities

• Independently performs IT audits on complex information systems, applications, and enclaves to ensure controls exist and procedures comply with Federal and DOD standards.
• Conducts accurate evaluation of the level of security required and protects systems from unauthorized access or destruction.
• Works at the highest level of all phases of information systems auditing and provides technical support in vulnerability assessment, risk assessment, network security, and security implementation.
• Provides technical evaluations of customer systems and assists with security improvements.
• Conducts cybersecurity control validation exercises on classified and unclassified networks, applications, and systems.

Tools

eMASS

Job description

CDW Government, LLC is seeking an IT Audit professional to independently perform audits on complex information systems, ensuring controls exist and comply with Federal and DoD standards. The role involves evaluating security levels and protecting assets across all phases of IS auditing.

You will support vulnerability risk assessment, network security, and security implementations, conduct cybersecurity control validation on classified and unclassified networks, and weigh business needs against