Mid-Level Audit/COOP Business Analyst
Listed on 2026-09-13
-
IT/Tech
Cybersecurity, Information Security & Data Protection
Summary Come join a company that strives for Extraordinary People and Exceptional Performance!
Summary Come join a company that strives for Extraordinary People and Exceptional Performance!
Chenega Services & Federal Solutions, LLC
, a Chenega Professional Services’ company, is looking for a Mid-Level Audit/COOP Business Analyst to support the Federal Housing Finance Agency (FHFA) audit, assessment and continuity of operations (COOP) activities by evaluating information technology systems, cybersecurity controls, and business processes. This position supports Federal Information Security Modernization Act (FISMA) audits, Office of Inspector General (OIG) audits, information technology control assessments, implementation of COOP and remediation tracking activities.
The analyst is responsible for documenting audit procedures, analyzing technical and operational evidence, identifying control weaknesses, and communicating findings and recommendations to stakeholders.
Our company offers employees the opportunity to join a team where there is a robust employee benefits program, management engagement, quality leadership, an atmosphere of teamwork, recognition for performance, and promotion opportunities. We actively strive to channel our highly engaged employee’s knowledge, critical thinking, and innovative solutions for our clients.
Responsibilities- Support the planning, execution, and reporting of FISMA audits, OIG audits, information technology audits, and cybersecurity assessments.
- Evaluate information security controls and assess compliance with FISMA, NIST guidance, FHFA policies, and federal cybersecurity requirements.
- Collect, review, and maintain audit evidence, supporting documentation, and work papers in accordance with federal audit standards.
- Coordinate with system owners, cybersecurity personnel, business stakeholders, and audit teams to obtain required documentation and evidence.
- Assist in developing audit programs, test procedures, risk assessments, and evaluation methodologies.
- Track audit findings, recommendations, corrective actions, and Plans of Action and Milestones (POA&Ms) through remediation and closure.
- Prepare status reports, briefing materials, dashboards, and executive-level summaries of audit activities and remediation efforts.
- Participate in interviews, walkthroughs, control testing, and validation activities.
- Communicate audit results and recommendations clearly to technical and non-technical audiences.
- Maintain awareness of emerging cybersecurity threats, federal audit standards, and industry best practices.
- Assist senior auditors and project leadership in the execution of contract deliverables and customer support activities.
- Develop and Execute Disaster Recovery Tests and Simulations:
Develop and execute disaster recovery tests and simulations to validate the effectiveness of DR plans and procedures. - Implement and Manage Backup Strategies:
Implement and manage backup strategies to ensure that data is regularly backed up and can be restored effectively. - Oversee Data and System Restoration:
Oversee the restoration of data and systems from backups in the event of a disaster or data loss incident. - Maintain Detailed Documentation:
Create and maintain detailed documentation of disaster recovery plans, processes, and procedures. - Continuously Review and Improve DR Strategies:
Continuously review and improve DR strategies and procedures to ensure they remain effective and up-to-date.
- Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Accounting, Business Administration, or a related field.
- Three (3) to five (5) years of experience supporting federal IT audits, cybersecurity assessments, FISMA evaluations, OIG audits, COOP…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).