IT Audit Consultant

Job Description

Job Description

IT Audit & Compliance Analyst

Location: Hybrid/Onsite
Job Type: Contract
Schedule: Monday–Friday, Business Hours

Position Overview

We are seeking an experienced IT Audit & Compliance Analyst to support information security audit and compliance initiatives for a large enterprise environment. This role will partner with technical teams, business stakeholders, and governance personnel to prepare for internal and external audits, coordinate audit responses, track remediation efforts, and maintain compliance documentation.

The ideal candidate has experience with IT governance, cybersecurity frameworks, risk management, and regulatory compliance, along with the ability to manage multiple audit activities simultaneously.

Key Responsibilities

• Support planning, coordination, and execution of internal and external IT audits.
• Prepare audit responses and coordinate evidence collection and submission.
• Develop, track, and maintain:
• • Corrective Action Plans (CAPs)
  • Plans of Action and Milestones (POA&Ms)
  • Security assessment responses
  • Safeguard and Security Reports
  • Audit status reports
• Track audit findings through remediation and closure.
• Coordinate with business units and technical teams to obtain required documentation.
• Identify documentation gaps and assist with developing or updating:
• • Policies
  • Standards
  • Procedures
  • Governance documentation
• Review audit evidence for accuracy, completeness, and compliance.
• Monitor remediation activities and provide regular status updates to leadership.
• Assist with implementing and documenting corrective actions.
• Maintain audit documentation repositories and compliance records.
• Support periodic compliance assessments, internal reviews, and risk assessments.
• Assist with compliance reporting and continuous improvement initiatives.

Required Qualifications

• Experience supporting IT audits, compliance, governance, or cybersecurity programs.
• Strong understanding of IT audit methodologies and compliance processes.
• Experience coordinating audit responses and collecting supporting evidence.
• Knowledge of risk management and security control assessments.
• Strong organizational skills with the ability to manage multiple priorities.
• Excellent written and verbal communication skills.
• Experience developing or maintaining governance documentation.

Preferred Experience

Experience with several of the following:

• Information Security Governance
• IT Audit Processes
• Risk Management
• Security Control Assessments
• NIST Cybersecurity Framework (CSF)
• NIST SP 800-53
• IRS Publication 1075
• Corrective Action Plans (CAPs)
• Plans of Action and Milestones (POA&Ms)
• Audit Evidence Collection
• Compliance Documentation
• Security Control Implementation
• Supporting IRS, SSA, or OSA audits and audit responses

Preferred Certifications

One or more of the following certifications is highly preferred:

• CISA (Certified Information Systems Auditor)
• CGRC (Certified in Governance, Risk and Compliance)
• CISSP (Certified Information Systems Security Professional)
• CRISC (Certified in Risk and Information Systems Control)
• CompTIA Security+
• Equivalent cybersecurity or audit certification