IT Audit Analyst

We are seeking an IT Audit Analyst to support a federal program at Scott Air Force Base in O'Fallon, Illinois. This position follows a hybrid work schedule, with onsite work required three days per week, and requires an Interim Secret Security Clearance with the ability to obtain a full Secret Clearance.

The selected candidate will support IT audit and compliance activities by evaluating information systems, testing internal controls, assisting with audit remediation, and ensuring compliance with Department of Defense and federal cybersecurity standards. This role offers an excellent opportunity for professionals interested in IT audit, cybersecurity compliance, and federal financial systems.

Key Responsibilities

• Perform IT audit and compliance reviews of financial and information systems.
• Evaluate IT controls for design and operating effectiveness.
• Assist in developing and tracking Corrective Action Plans (CAPs).
• Review and test Complementary User Entity Controls (CUECs).
• Support remediation testing for audit findings.
• Assist with FISCAM compliance activities.
• Review SSAE 18 reports and supporting documentation.
• Prepare audit documentation and test results.
• Support IT compliance training for program personnel.
• Collaborate with internal stakeholders to improve audit readiness.

• Bachelor's degree in Information Systems, Accounting, Information Technology, Cybersecurity, or a related field.
• 0–3 years of experience in IT audit, internal audit, compliance, or information systems.
• Knowledge of IT control testing and audit methodologies.
• Familiarity with NIST 800-53 Risk Management Framework (RMF).
• Understanding of FISCAM and federal IT audit standards.
• Knowledge of DoD Instruction 8510.01 and FMFIA preferred.
• Experience reviewing SSAE 18 reports or CUECs is a plus.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Interim Secret Security Clearance with the ability to obtain a full Secret Clearance.
• Must reside in the St. Louis metropolitan area.
• Ability to report onsite as required.

Preferred Qualifications

• Experience (including internships) supporting IT audit or internal audit in the Federal Government.
• Experience supporting Department of Defense (DoD) agencies.
• Knowledge of federal cybersecurity compliance frameworks.