Apply on Employer Site

E-INFOSOL LLC · 1 day ago

Information Assurance and Audit Analyst

Washington, DC, US

Full-time

Onsite

Mid Level

$120K/yr - $140K/yr

3+ years exp

E-INFOSOL LLC is seeking a highly motivated Information Assurance and Audit Analyst to join their innovative, customer-focused team in Washington, DC. The role involves assisting the government in monitoring and auditing compliance with the Federal Information System Modernization Act (FISMA) and preparing quarterly FISMA reports to DOJ and ODNI.

Cyber SecurityInformation TechnologySoftware

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Assisting the government in monitoring and auditing compliance with the Federal Information System Modernization Act (FISMA) implementation requirements from the Department of Justice (DOJ) and the Office of the Director of National Intelligence ODNI

The results will be used to identify areas for internal cybersecurity compliance improvement

Compliance areas, as defined by DOJ and ODNI, include configuration management, contingency planning, incident response planning, system security plans, core security controls assessments, privileged user security training, Plan of Action Milestones reviews, and vulnerability scanning

Assist in the preparations of quarterly FISMA reports to DOJ and ODNI

Qualification

IT riskComplianceIT auditingFISMA complianceNIST frameworksISO2700HIPAA complianceAnalytical skillsAttention to detailCustomer focusCommunication skills

Required

Active Top Secret clearance w/ the capability of obtaining SCI/CI-Poly

Bachelor's Degree in Information Technology, Computer Science, or related field

Minimum 3-5 years of experience in IT risk and compliance, IT governance, IT auditing or an IT/cybersecurity related field

Demonstrated knowledge of compliance practices and IT audit operations

Demonstrated knowledge of operating systems, application development, change management, operations, networking and telecommunications, databases, business continuity, disaster recovery, and physical and logical security

Excellent analytical skills to understand organizational objectives, evaluate risks and controls and accurately document and support work performed, and conclusions reached

General knowledge of internal control concepts, principles, risk analysis, FISMA, PCI Compliance, HIPAA, Privacy, process improvement and techniques, including frameworks such as NIST, ISO2700, COSO and COBIT

Strong attention to detail

Strong customer focus, including the ability to manage customer needs and multiple work priorities

Strong verbal and written communication skills