Senior Information Systems Auditor

Valiant Solutions is seeking a Senior Information Systems Auditor to join our rapidly growing and innovative team!

The Information Systems Auditor Senior will assess and validate the integrity, confidentiality, and availability of a federal customer's information systems.
This role evaluates IT controls, aligned to OMB A-123, verifies compliance with frameworks, and recommends improvements that keep systems secure and effective. Working independently on full-scope IT audits, the auditor supports internal control reviews under FMFIA and the CFO Act of 1990, the annual FISMA self-assessment, and full life cycle support of OIG and GAO audits.

Named one of the Washington Business Journal’s
Best Places to Work
every year since 2014
, Valiant is proud of our employee-centric culture and commitment to excellence. If you are interested in learning more about Valiant and this opportunity,

Location: Remote

This position allows for 100% remote work. Remote work requires a high level of trust in our employees, and we strictly adhere to the details outlined in our Remote Work Policy below.

Eligibility Requirements: Due to government requirements, U.S. citizenship is required for this program. Must be able to obtain and maintain a Public Trust clearance.

Required Experience:

• 5–7 years of experience executing full-scope IT audits independently
• Strong knowledge of federal IT environments and audit tools and techniques
• Experience with data analytics, scripting, or automated testing tools
• Strong formal written and oral communication skills
• Bachelor's degree in information systems, accounting, computer science, or a related field preferred
• CISA certification preferred; CISSP, CRISC, or CIA also valued
• Knowledge of NIST SP 800-53 Rev. 5 and SP 800-53A control assessment, the OIG FISMA metrics, GAO FISCAM, COBIT, and COSO
• Experience with internal control reviews under FMFIA and OMB Circular A-123
• Experience supporting OIG or GAO audits in a federal environment

Responsibilities:

• Execute full-scope IT audits independently, applying federal IT audit tools and techniques aligned with OMB A-123.
  NOTE: this is not Cybersecurity work aligned to NIST 800-53 controls.
• Contribute to the annual IT and cybersecurity risk assessment using COBIT, COSO, or another recognized framework.
• Conduct ongoing control reviews and targeted control assessments under the approved Internal Control Review Plan and the customer's internal control methodology.
• Perform the annual FISMA self-assessment against the OIG FISMA metrics and evaluation guide, summarizing controls in place, assigning maturity ratings, and recommending controls to close gaps.
• Review corrective actions for prior OIG and GAO recommendations each year to confirm they still operate as intended.
• Review management's risk mitigation actions and control activities to confirm they operate as intended and reduce risk.
• Maintain the internal controls inventory, mapped to business processes, and update it after reviews, audits, and process changes.
• Perform independent verification and validation (IV&V) of closure packages to determine whether they address recommendations and root causes, and draft formal IV&V walkthrough documents.
• Work with stakeholders to implement newly established controls and test their effectiveness.
• Apply data analytics, scripting, or automated testing tools to expand audit coverage and efficiency.
• Perform trend analysis of audit and internal control findings, observations, and recommendations.
• Document results and present recommendations to customer management.

About Valiant Solutions

Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. We support the full cyber lifecycle, from…