IT Audit Manager - Hybrid - Clearance Required

IT Audit Manager

The IT Audit Manager is responsible for leading the planning and execution of complex federal IT and performance audits, attestation engagements, and cybersecurity assessments, including Federal Information Security Modernization Act of 2014 (FISMA) assessments, Federal Information System Controls Audit Manual (FISCAM) audits, and Statement on Standards for Attestation Engagements (SSAE) No. 18 System and Organization Controls (SOC) 1 examinations. This position is responsible for developing detailed engagement plans, overseeing fieldwork, monitoring budgets and timelines, reviewing audit documentation and deliverables, and communicating results to client leadership.

Managers are integrally involved in informing clients of the project status and submitting the deliverables.

The following are representative, but not all-inclusive, of the knowledge, skills, and abilities required to lead in this role.

Duties and Responsibilities:

• Lead multiple IT audit and cybersecurity risk engagements from planning through reporting, including FISMA, SSAE
  18 SOC 1, FISCAM, and other IT and cybersecurity related assessments (National Institute of Standards and Technology Cybersecurity Framework, Artificial Intelligence governance, etc.).
• Manage client relationships and present audit results to Chief Information Officers (CIOs), Chief Information Security Officers (CISOs), and executive leadership.
• Review work papers, findings, and reports to ensure high-quality deliverables.
• Coach, mentor, and develop seniors and associates.
• Manage engagement budgets, schedules, deliverables, and staffing.
• Demonstrate excellent project management skills, inspire teamwork and responsibility with engagement of team members.
• Leverage current and emerging technologies, analytics, and firm tools to enhance work product quality and efficiency.
• Participate in internal firm initiatives and assist in creating proposals and other new business development efforts.

Applicant must have:

• Bachelor's degree in Information Systems, Accounting, or a related field.
• Active Certified Information Systems Auditor (CISA) certification.
• At least 6 years of experience in IT audit, cybersecurity, technology risk, or a related field.
• At least 3-5 years of direct federal IT audit experience applying Government Accountability Office standards and frameworks, including FISMA and FISCAM requirements.
• At least 3 years of experience leading audit teams and managing client engagements.
• Strong project management skills with the ability to manage multiple priorities and meet deadlines in a fast-paced environment.
• Experience mentoring, coaching, and developing high-performing audit professionals.
• Excellent written, verbal, and interpersonal communication skills.
• Strong analytical, critical-thinking, and problem-solving skills with exceptional attention to detail and accuracy.
• High ethical standards, sound professional judgment, and a commitment to maintaining integrity, objectivity, and confidentiality.

Preferred But Not

Required:

• Previous experience with a Big Four or other national public accounting or consulting firm.
• Additional relevant professional certifications, such as Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA), Project Management Professional (PMP), or Certified Information Security Manager (CISM).
• Experience leading federal IT audits for civilian or Department of War (DoW) agencies.