Info Sys/IT Audit Senior Manager (FISMA and FISCAM) - CPA

IBSS

• $140K — $170K *
Legal & Accounting
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's degree in accounting or business required.
  • CPA or relevant professional certification is mandatory.
  • Minimum of seven years of audit experience needed.
  • At least three years' experience with Federal Government financial statements required.
  • Familiarity with GAO FISCAM and GAGAS standards essential.

Responsibilities

  • Manage the FISMA evaluation process, determining IT infrastructure evaluation scope.
  • Test effectiveness of agency information security practices across selected systems.
  • Oversee FISCAM general controls testing in audit contexts.
  • Coordinate with IT staff for comprehensive audit teamwork and scheduling.
  • Supervise audit team members, ensuring quality control on-site.

Benefits

  • Comprehensive medical, dental, vision, and prescription drug coverage.
  • Paid time off and federal holidays included.
  • Matching 401K plan available to employees.
  • Tuition and professional development reimbursement offered.
  • Flexible Spending Accounts (FSA) and Dependent Care Account (DCA) options.
Full Job Description
Job Title: Info Sys/IT Audit Senior Manager (FISMA and FISCAM) - CPA

Location: Washington, DC - on site at the client's Washington, DC office; on-site management of the audit team and in-person attendance at status meetings

Clearance Required: Must be authorized to work in the United States and be able to obtain a Public Trust Security clearance

Salary: $140,000 - $170,000 base (based on experience)

Application Deadline: OCTOBER 31, 2026

To apply, please follow these steps:
• Visit https://ibsscorp.com/careers/
• Select the position you are interested in
• Review the job details, then click Apply Now
• Complete and submit your application

Background

Our client, a Federal Office of Inspector General (OIG) in the Washington, DC area, obtains three mandated engagements every year: a full-scope independent audit of the agency's consolidated financial statements, an annual Federal Information Security Modernization Act (FISMA) evaluation of the agency's information security program, and an annual Payment Integrity Information Act (PIIA) compliance audit. The engagements run concurrently against fixed statutory and OMB deadlines, are performed under Government Auditing Standards (GAGAS), and are delivered primarily on site at the client in Washington, DC. The client is identified to candidates after a non-disclosure agreement is signed.

The IS/IT Audit Senior Manager is Key Personnel at the Senior Manager level and runs the day-to-day FISMA evaluation and the FISCAM testing inside the financial statement audit.

1. FISMA evaluation management
• Obtain an understanding of agency IT infrastructure and systems and set the IT evaluation scope and strategy.
• Test the effectiveness of agency information security policies, procedures, and practices on a representative subset of agency information systems.
• Cover the in-scope systems, including general ledger and program systems.
• Prepare the draft OIG questionnaire submission to OMB, due 10 workdays before the OMB FISMA reporting deadline.
• Follow up prior-year FISMA recommendations and findings.

2. IT controls within the financial statement audit
• Manage FISCAM general controls testing of the agency information system control environment.
• Propose further testing of application controls for financial systems when general controls are effective.
• Include IT staff in the audit staffing list and schedule IT control work within the audit milestones.

3. Supervision, documentation, and meetings
• Provide on-site management, supervision, and quality control for the IT audit team.
• Attend status meetings in person, held bi-weekly or as agreed with the client.
• Keep engagement documentation in the OIG-provided repository (for example, TeamMate).
• Deliver the FISMA management letter, due in draft each December.

Education
• Minimum education for this role: A bachelor's degree in accounting or business is the stated minimum for the audit staff.
• Must meet the Engagement Standards, which address staff qualifications, continuing professional education (CPE), independence, and due professional care.

Certifications
• CPA certificate or other professional certification deemed relevant and acceptable by the client.

Desired / Preferred Qualifications
• Prior experience supporting Federal Office of Inspector General (OIG) FISMA evaluations or IT controls audits.
• IT audit expertise.
• Recent Federal Inspector General FISMA and FISCAM experience.
• Credentials such as CISA, CISSP, or CISM.
• Experience with TeamMate or a comparable electronic workpaper system.

Key Technical Skills
• Required experience

- Currently a Senior Manager (or equivalent firm title).

- Minimum of seven (7) years audit experience.

- Minimum of three (3) years experience with Federal Government financial statements, or other demonstrably relevant audits accepted by the client.
• Standards and guidance

- GAO Federal Information System Controls Audit Manual (FISCAM).

- CIGIE Quality Standards for Inspection and Evaluation.

- Client Inspector General FISMA Reporting Metrics and OMB information security guidance.

- Generally Accepted Government Auditing Standards (GAGAS).

IBSS offers a competitive benefits package that includes medical, dental, vision, and prescription drug coverage with a company-paid deductible, paid time off, federal holidays, a matching 401K plan, tuition/professional development reimbursement, and Flex-Spending (FSA)/Dependent Care Account (DCA) options.

Similar Jobs

More Jobs at IBSS

More Legal & Accounting Jobs

Find similar Info Sys/IT Audit Senior Manager (FISMA and FISCAM) - CPA jobs: