IT Auditor - Remote

Responsibilities: Major concentration as a Information Risk Analyst, but not limited to: - Review and score Texas Risk and Authorization Management Program assessment responses - Review third-party audits and reports (SOC 2 type 2, ISO 27xxx, CSA STAR, etc.) - Work with cloud vendors to communicate deficiencies in assessment responses - Manage and prioritize multiple assessments - Communicate assessment requirements to vendors and customer organizations Skill Required/Desired: Required 4 years - Conducting risk assessments, developing POA&Ms, facilitating/coordinating with information owners and custodians Required 2 years - Conducting cloud security assessments Required 2 years - Developing/Reviewing information security policies and procedures Preferred 2 years - Coordinating or conducting IT security audits Preferred 2 years - Identifying, reviewing, and prioritizing vulnerabilities and remediation efforts Preferred 2 years - Data analysis 800 Corporate Drive, Suite 301-500 Stafford, VA, 22554 Phone - 1 (703) 547-8929 Fax - 1 (703) 991-7602