Information Systems Auditor- CISA

Company: Silverthorne Advisory Group
Location: Scott Air Force Base, IL (On-site)
Clearance Requirement: Active Secret Clearance (Sponsorship Available)
Experience Level: 3+ Years
Employment Type: Full-Time/ Salaried

Silverthorne Advisory Group is seeking an Information Systems Audit or (CISA Preferred) to support growing opportunities within the Defense sector. The successful candidate will evaluate information technology controls, cybersecurity safeguards, governance processes, and enterprise risk management programs while supporting federal financial management, audit readiness, and digital modernization initiatives.

In this role, you will perform risk-based IT audits, assess the effectiveness of IT General Controls (ITGCs), application controls, and cybersecurity controls, and develop recommendations to strengthen security, compliance, and operational efficiency. You will work closely with cybersecurity professionals, IT teams, finance organizations, business stakeholders, and external auditors to identify technology risks and improve internal controls.

This position offers an opportunity to combine information systems auditing, cybersecurity, data analytics, and emerging artificial intelligence capabilities in support of high-impact federal and Defense missions.

• Plan, execute, and document risk-based information systems audits and technology risk assessments.
• Evaluate IT General Controls (ITGCs), application controls, automated business processes, and financial system controls.
• Assess cybersecurity safeguards, identity and access management, data protection, and privileged access controls.
• Identify control deficiencies, security vulnerabilities, compliance gaps, and opportunities for risk mitigation.
• Prepare audit work papers, document findings, develop recommendations, and communicate results to stakeholders.
• Track corrective actions and validate remediation efforts to ensure identified issues are addressed.
• Support compliance with applicable federal regulations, cybersecurity standards, and audit frameworks, including NIST, FISMA, COBIT, FISCAM, and FedRAMP.
• Review change management, configuration management, backup and recovery, disaster recovery, and business continuity controls.
• Evaluate security controls across cloud environments, enterprise applications, databases, and IT infrastructure.
• Assess logging and monitoring, incident response, vulnerability management, and security operations practices.
• Support internal and external audits, compliance assessments, and regulatory examinations.
• Collaborate with IT, cybersecurity, finance, and business teams to strengthen governance, internal controls, and audit readiness.
• Identify opportunities to leverage data analytics, automation, and artificial intelligence to improve audit testing and operational efficiency.
• Stay informed about evolving cybersecurity threats, regulatory requirements, and industry best practices.

• Minimum of 3 years of experience in IT auditing, information security, cybersecurity, technology risk management, internal audit, or technology consulting.
• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Information Technology, or a related field.
• U.S. citizenship and an active Secret security clearance. Clearance sponsorship may be available for qualified candidates.
• Experience performing IT General Controls (ITGC) testing and technology risk assessments.
• Knowledge of relevant control frameworks and standards, including NIST Cybersecurity Framework, NIST SP 800-53, NIST SP 800-171, COBIT, COSO, and FISCAM.
• Experience evaluating logical access, identity and access management, change management, configuration management, and backup and recovery controls.
• Understanding of cybersecurity principles, internal controls, compliance requirements, and enterprise risk management.
• Experience documenting audit procedures, preparing findings, and developing actionable recommendations.
• Strong analytical, problem-solving, organizational, and written and verbal communication skills.
• Ability to manage multiple priorities, work independently, and collaborate effectively in a fast-paced consulting environment.

• Certified Information Systems Auditor (CISA) certification.
• Experience supporting Department of War (DoW), federal civilian, or Intelligence Community clients.
• Familiarity with FISMA, FedRAMP, the Risk Management Framework (RMF),…