Senior IT Security Auditor – Remote, Federal Compliance

Aptnexus; Washington (District of Columbia); Remote; USD 115,000 - 140,000; Full time

Job summary

AptNexus is seeking a Senior IT Security Auditor to perform cybersecurity compliance audits for our Department of Treasury customer. The program audits federal, state, and local government organizations that receive sensitive federal data, evaluating their information systems against security requirements tailored from NIST SP 800-53.

The ideal candidate will plan and conduct audits across operating systems, databases, networks, cloud services, and mainframe platforms, delivering clear findings

Qualifications

• Seven or more years in cybersecurity, including federal audits or security control assessments.

Responsibilities

• Plan and conduct cybersecurity compliance audits of government partner organizations.
• Develop scoping docs and audit schedules for in-scope technologies.
• Perform hands-on testing against NIST SP 800-53, CIS Benchmarks, and DISA STIGs.
• Evaluate management controls via interviews, policies, and artifacts.
• Present findings at openings and closings with clear remediation timelines.
• Provide daily status updates and draft final reports.
• Educate audited organizations on applicable security requirements and remediation approaches.

Skills

NIST SP 800-53

RMF

FIPS 140

Windows

Linux/UNIX

macOS

VMware/Hyper-V

Docker/Kubernetes/OpenShift

Cloud (AWS/Azure/Google)

FedRAMP

Tenable Nessus

SCAP

CIS Benchmarks

DISA STIGs

RACF/ACF2

Audit reporting

Excel/Word

CIA/GSNA/CySA+

Education

Bachelor's degree in IT/cybersecurity/information systems

High school diploma

Tools

Tenable Nessus

SCAP

CIS Benchmarks

DISA STIGs

VMware

Hyper-V

Docker

Kubernetes

OpenShift

AWS

Azure

Google Cloud

RACF/ACF2

Job description

AptNexus is seeking a Senior IT Security Auditor to perform cybersecurity compliance audits for our Department of Treasury customer. The program audits federal, state, and local government organizations that receive sensitive federal data, evaluating their information systems against security requirements tailored from NIST SP 800-53.

The ideal candidate will plan and conduct audits across operating systems, databases, networks, cloud services, and mainframe platforms, delivering clear findings