Senior Information Systems Auditor — IT Risk & Cybersecurity Lead

LaunchCode; St. Louis (MO); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Health, Vision, and Dental plans

401(k) with up to 6% match

Generous PTO

Bonus opportunities

Professional development

Company retreats & team events

Job summary

LaunchCode is assisting a partner organization in recruiting an Information Systems Auditor to evaluate IT controls, cybersecurity safeguards, governance processes, and enterprise risk management programs for defense-sector clients.

The role leads a team, conducts risk-based IT audits, assesses ITGCs, application controls, and cybersecurity controls, and provides recommendations to strengthen security, compliance, and operational efficiency.

Qualifications

• CISA certification.
• 10+ years of experience in IT audit, information security, cybersecurity, risk management, internal audit, or technology consulting.
• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Information Technology, or a related discipline.
• U.S. Citizenship with an active Secret Clearance.
• Experience performing IT General Controls (ITGC) testing and technology risk assessments.
• Knowledge of NIST Cybersecurity Framework, NIST SP 800-53, NIST SP 800-171, COBIT, COSO, and FISCAM.
• Experience evaluating identity and access management, change management, logical access, backup and recovery, and configuration management controls.
• Strong understanding of cybersecurity principles, security controls, and enterprise risk management.

Responsibilities

• Lead a team of junior staff and ensure completion of technical and functional deliverables.
• Plan, execute, and document risk-based information systems audits.
• Evaluate IT General Controls (ITGCs), application controls, and automated business processes.
• Assess cybersecurity, identity and access management, and data protection controls.
• Perform technology risk assessments and identify control gaps, vulnerabilities, and compliance risks.
• Conduct testing of security, operational, and financial system controls.
• Develop audit workpapers, findings, recommendations, and executive-level reports.
• Validate corrective actions and monitor remediation efforts through completion.
• Support compliance with NIST, COBIT, ISO 27001, FISMA, CMMC, SOX, FedRAMP, and other regulatory frameworks.
• Participate in internal and external audits, assessments, and regulatory examinations.
• Evaluate cloud environments, enterprise applications, databases, and infrastructure security controls.
• Assess change management, configuration management, backup, disaster recovery, and business continuity processes.
• Review logging, monitoring, incident response, vulnerability management, and privileged access management practices.
• Analyze technology risks associated with cloud computing, automation, artificial intelligence, and other emerging technologies.
• Collaborate with cybersecurity, engineering, finance, and business stakeholders to improve governance and internal controls.
• Identify opportunities to improve audit methodologies, automate testing procedures, and enhance operational efficiency.
• Stay current on evolving cybersecurity threats, regulatory requirements, and industry best practices.

Skills

IT audit

CISA

Secret clearance

Leadership

Regulatory compliance

Education

Bachelor's degree

Tools

Power BI

SQL

Python

PowerShell

Azure

AWS

GCP

Job description

LaunchCode is assisting a partner organization in recruiting an Information Systems Auditor to evaluate IT controls, cybersecurity safeguards, governance processes, and enterprise risk management programs for defense-sector clients.

The role leads a team, conducts risk-based IT audits, assesses ITGCs, application controls, and cybersecurity controls, and provides recommendations to strengthen security, compliance, and operational efficiency.