IT and Cyber Risk Auditor Principal

Tasks

• Assess compliance with federal frameworks
• Collaborate with cybersecurity and IT teams
• Conduct FISMA and STIG assessments
• Evaluate IT controls
• Identify control gaps
• Lead cybersecurity risk assessments
• Manage certification and accreditation
• Participate in audit activities
• Perform security event analysis
• Prepare audit reports
• Provide risk recommendations
• Respond to incidents
• Review vulnerability reports

Perks/Benefits

• Benefits
• Health insurance
• Paid time off
• Retirement plan
• Wellness
• Work flexibility

Skills/Tech-stack

Cloud Security | Cyber risks | Cybersecurity Risk Management | Cybersecurity controls | Cybersecurity frameworks | Cybersecurity risk | FISMA | FedRAMP | ICD 503 | ISO 27001 | IT Audits | Implementation guides | Incident Response | NIST | NIST 800 | NIST 800-83 | RMF | Risk Management | Security Risk | Security Technical Implementation Guides | Security controls | Security technical implementation | Vulnerability Management | Xacta