IT Audit Specialist Ashburn, VA,

Position: IT Audit Specialist Ashburn, VA, US
Hybrid## IT Audit Specialist Ashburn, Virginia, United States of America

Job Title:

IT Audit Specialist Job Category:
Information Technology Time Type:
Full time Minimum Clearance Required to Start:
None Employee Type:
Regular Percentage of

Travel Required:

Up to 10%
Type of Travel:
Local     
*
* The Opportunity:

** CACI is currently looking for a Security IT Audit Specialist with agile methodology experience to join our BEAGLE (Border Enforcement Applications for Government Leading-Edge Information Technology) Agile Solution Factory (ASF) Team supporting Customs and Border Protection (CBP) client located in Northern Virginia! Join this passionate team of industry-leading individuals supporting the best practices in Agile Software Development for the Department of Homeland Security (DHS).The

Security IT Audit Specialist with both strong application and network security delivery skills will need to have a deep technical understanding of Cybersecurity and financial audit practices.  They will work as an integral part of a highly productive team of seasoned technical professionals who thrive on supporting our customer's mission and growth objectives– responsible for designing, developing, leading, and implementing secure application and infrastructure capabilities for a variety of legacy and modernized systems and applications.

They will work in close collaboration with software developers/engineers, quality assurance engineers, stakeholders, and end users within Agile Engineering processes. They must have a working knowledge of enterprise class information assurance requirements, FISCAM, and network security and survivability.

They will also be responsible for supporting development of a spectrum of engineering artifacts that adequately, but succinctly capture system security requirements, application and network security design, and network security architecture. This position is responsible for ensuring that all assigned work activities are performed in a timely, secure, compliant and cost-effective manner while maintaining the highest quality of performance.
** Responsibilities:
** As a member of the Internal Audit Sustainment Team, you will support Audit Readiness, Sustainment, and Security compliance of custom coded and COTS applications and databases. Responsibilities include contributing to cybersecurity control implementation and audit support activities such as
* Support implementation of the Technical Audit Sustainment Program strategy
* Assist developers with understanding and meeting FISCAM compliance
* Enable assurance for information security during all phases of agile system development and deployment
* Help ensure information security is incorporated throughout Agile development and deployment
* Support security controls for SAP and custom financial support systems
* Assess system lifecycle requirements and identify potential security impacts
* Assist with vulnerability scanning, security hardening, and remediation efforts
* Support certification and security configuration of development environments
* Collaborate with SAP Security Administrators to support separation of duties, access controls, and audit functionality
* Assist with responding to auditor Requests for Information (RFIs) and assembling Provided by Client (PBC) documentation
* Contribute to development of Corrective Action Plans (CAPs) in response to audit findings or Notifications for Record (NFRs)
* Support evaluation of SAP GRC and other GRC tools in coordination with security administrators
* Help maintain system security posture, including audit tracking, security documentation, and reaccreditation activities
* Monitor approved software usage and support compliance with approved security tools and configurations
* Assist CBP in maintaining compliance with OMB Circular A-123 internal control requirements
* Apply information security practices in accordance with DHS and CBP security policies
** You’re good at:
*** Supporting and using security provisioning, monitoring, and compliance tools
* Applying established cybersecurity principles, standards, and frameworks
* Analyzing moderately complex security and compliance issues and…