REQUIREMENTS
- Experience with cloud and on-premis applications desirable.
- Simultaneously works on several complex assignments requiring analysis of intricately related complex variables.
- Experience with leading and successfully developing audit and security related system documentation and requirements desired.
- Must have at least ten years of progressively responsible experience in the information technology arena as an IT auditor, IT security analyst, IT manager, business analyst, system administrator or a combination of these.
- Possess clear, concise, and effective verbal and written communication and project management skills needed for functioning in an unstructured matrix management environment.
- Experience with assessing financial systems leveraging NIST 800 series, or FISMA Compliance strongly desired.
- CISSP or CISA certification strongly desired.
KEY RESPONSIBILITIES
- Participates in the process to evaluate, develop, maintain, and update the technology compliance program.
- Advises the technology support officer and technology managers on compliance, information security, and internal controls.
- Prepares the technology departments for the yearly FISMA audits.
- Assist in developing required documents in support of internal FISMA reviews.
- Develop solutions with team members to minimize vulnerabilities.
- Advises the technology officer of compliance issues and recommends solutions
- Provides a weekly status report to the COR documenting concerns, issues, risks, and progress.
- Recommends and helps implement automated solutions in the areas of compliance, auditing, and vulnerability detection for the branch.
- Designs, tests, and implements audit mechanisms to detect non-compliance and to support evaluations of evidentiary materials.
- Ensures proper audit trails are recorded.
- Creates audit and monitoring reports used by the team, as directed.