CACI bv · 1 month ago
Information Assurance III - Audit Support Services
CACI is a company dedicated to ensuring the safety of our nation through integrity and innovation. The Information Assurance III role focuses on providing audit support for external cyber audits, managing audit readiness, and collaborating with various stakeholders to ensure compliance and remediation of findings.
ConsultingEducationTraining
Responsibilities
Ensure the Cybersecurity Operation Cell (CSOC) is prepared to successfully pass inspections and audits at all times; this includes but is not limited to identifying the audit criteria for CCRI/CCORI, FISMA, FISCAM, and CSSP audits
Review regulations, directives, guidance, grading criteria, regulations, and other documents and products as required to identify applicable cybersecurity standards and inspection criteria
Perform self-assessments of CSOC services to identify deficiencies, gaps, or other issues and provide remediation recommendations to the Chief of Cyber Readiness
Coordinate and collaborate with other Contracts, Government entities, and activities to identify and remediate any findings outside the direct control of TCS staff
As required, provide status briefings and reports to the Government on the status of findings and remediation status
Regularly attend meetings held both internally and community-wide
Develop, update, and maintain dashboards, charts, documents, reports, and other products as required to accurately depict NGA’s audit readiness
Provide input to the Weekly CSOC Status Report
Coordinate and collaborate with any internal or external stakeholders (government and contractor) as needed or directed by the government in support of this service
Qualification
Required
Considerable experience preparing organizations for CCRI/CCORI, CSSP, and FISMA audits
Strong understanding of the NIST Cybersecurity Framework
Working knowledge of DOD Cybersecurity Services Evaluator Scoring Metrics (ESM) V.10
Working knowledge of DoDIN Inspection Coordination Guides
Working knowledge of DoDIN Inspection Pre-Deployment Checklists
Working knowledge of the areas of CCORI to include, but not limited to, DCO-IDM effectiveness, Traditional Security STIG checks, Contributing Factors, and CND Directive scoring
A minimum of 6 years of demonstrated experience supporting an IC or DoD agency in an auditor role
Strong understanding of cybersecurity compliance policy, governance, programs, processes, and metrics
Excellent verbal and writing skills with the ability to write clear and concise assessment reports
Demonstrated experience providing briefings to an executive audience
IAT Level II certified
Willingness to obtain CSSP Auditor certification within 6 months of joining the team
Preferred
ISACA CISA Certified
IAT Level III Certified
Benefits
Healthcare
Wellness
Financial
Retirement
Family support
Continuing education
Time off benefits
Company
CACI bv
CACI levert, implementeert en beheert bedrijfskritische oplossingen voor het Hoger Onderwijs: het StudentInformatieSysteem OSIRIS en LISA voor zaakgericht werken.
Funding
Current Stage
Growth StageCompany data provided by crunchbase