The following states/districts are excluded from this job ad: AK, CA, CO, CT, DC, HI, LA, MA, MN, MO, NE, NV, NH, NJ, NM, NY, ND, OR, PR, RI, VT, WA, WYFuture Need - Actively InterviewingLocation: Remote in any United States jurisdiction not excluded from this job advertisement.
We're looking for a skilled Audit Analyst to support the continuous improvement of Department of Veteran Affairs audit cycle processes, analysis, and reporting. If you're passionate about compliance-driven audit reporting, apply now!
Position Description: The Cyber Audit Analyst ensures the success of the cybersecurity audit lifecycle through audit preparation, coordination, findings management, reporting, and documentation.
Minimum/General Experience: 3 years of audit analysis experience
Minimum Education: Bachelors Degree in computer science, information technology, business, or related field
Essential Skills/Qualifications:- Above average experience collecting, organizing, validating, and maintaining cyber audit-related documentation and records
- Above average experience reviewing cyber audit data, reports, and documentation for accuracy and compliance
- Above average experience testing internal controls and audit procedures
- Above average experience identifying risks, trends, anomalies, and process gaps
- Experience identifying, updating, and maintaining audit schedules and audit engagements
- Experience preparing stakeholders for cyber audit engagements and reviews
- Experience preparing reports and status updates
- Experience reporting audit findings and recommendations to stakeholders
- Experience analyzing large and complex datasets from multiple sources
- Experience developing metrics, reports, and performance measures
- Experience conducting trend analysis and root cause analysis
- Experience supporting regulatory, information technology, and operational audits
- Knowledge of cybersecurity controls and compliance
- Excellent experience with Microsoft 365 applications (e.g., SharePoint, Teams, Excel, PowerPoint)
- Excellent verbal and written communication skills
- Knowledge of Power BI and Power Platform (preferred)
General Physical Requirements needed to perform the essential functions of this job may vary based on the location of the assignment.
- Assignment Location - Remote
- Sedentary Work - Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects.
- Typing, communicating, repetitive motions.
- Close visual acuity to prepare and analyze data, view computer monitors and read. May need to view presentation screens and other visual aids in a virtual setting.
- Inside environmental conditions with protection from outside elements.
Security: Ability to obtain/maintain Federal Civilian Public Trust
- U.S. Citizenship or Permanent Resident that has lived in the United States for at least 3 years
Federal Civilian Public Trust Consists of a review of up to but not limited to:
- Covers 10 year period and in some instances lifetime events
- OPM Security Investigations Index (SII)
- DOD Defense Central Investigations Index (DCII)
- National Agency Check (NAC) records
- FBI name check
- FBI fingerprint check
- Credit report check
- Written inquiries to previous employers and references listed on the application for employment
- Potential interviews with the subject, spouse, neighbors, supervisor, coworkers
- Law enforcement check
- Court records check
- Education check- Attendance and Degrees
Tasks/activities include, but are not limited to:- Supports audit planning, scheduling, and stakeholder coordination activities
- Collects, organizes, and maintains cybersecurity audit artifacts, supporting documentation, and evidence requests
- Supports follow-up activities and status reporting related to audit findings
- Assists in identifying process improvement opportunities related to audit operations
- Identifies, updates, and maintains the complete audit stakeholder list in the designated tool
- Updates and maintains the complete audit schedule to include audit targets and engagements
- Performs trend analysis, data modeling, and data validation to identify risks, patterns, and opportunities for improvement
- Analyzes audit findings, stakeholder data, and operational performance measures to support decision-making and continuous improvement efforts
- Supports the development of executive-level reports, presentations, and data visualizations
- Receives and distributes draft audit reports for sites and systems
- Receives and distributes draft Notice of Findings & Recommendations (NFR)
- Tracks NFR recommendations, final Federal Information Security Modernization Act (FISMA) recommendations, and site/system level findings
- Makes updates to the findings list throughout the audit stage
- Works with the appropriate Enterprise Cybersecurity Program (ECSP) analysts to ensure subject matter experts (SMEs) are added to the Information System Security Stakeholders and associated with the correct NIST security controls, organizations, and systems/applications
- Develops comparisons to show metrics for preliminary observations and draft findings
- Conducts and reports on trend analysis of audit findings using Power BI dashboards
- Assists in data analysis and modeling of audit findings
- Manages the documentation, training, and audit reports through the audit portal
- Participates with design team to identify areas of improvement for the audit portal
Compensation & Benefits: The annual projected pay range for this position is $69,914 - $93,590 with consideration being given to various factors including but not limited to qualifications, experience, job responsibilities, and geographic location.
Oxley Enterprises, Inc. offers a full array of benefits including:
- Medical, dental, vision and prescription drug coverage for you and your family.
- Life Insurance, short-term disability and long-term disability paid for by the Company.
- Supplemental coverages including Accident, Critical Illness, and Hospital.
- Additional Life insurance coverage for you and your dependents.
- 401k plan with various options to select based on your retirement goals.
