IT Program Auditor

The IT Program Auditor provides oversight and audit support to ensure the DHA Domain and Directory Services Branch (DDSB) maintains compliance with DoD Risk Management Framework (RMF), DHA cybersecurity directives, and federal security policies. This role focuses on auditing IT programs, validating control effectiveness, and ensuring accurate reporting to support DHA’s accreditation and compliance posture.

 

Responsibilities:

• Perform independent audits of IA and cybersecurity programs, verifying compliance with DoD cybersecurity standards, RMF controls, and DHA policies.
• Review and validate security documentation, accreditation packages, and RMF artifacts, ensuring accuracy, completeness, and audit readiness.
• Audit and assess the effectiveness of vulnerability management activities, including ACAS/eMASS asset tracking, credentialed scanning, and remediation reporting.
• Evaluate and document the impact of system modifications and change requests, ensuring security controls remain effective and properly recorded in DHA’s change management processes.
• Support IA incident and violation audits, ensuring accurate documentation, reporting, and corrective action tracking.
• Prepare and deliver audit reports, compliance summaries, and executive briefings for government stakeholders, highlighting risks, remediation progress, and residual vulnerabilities.
• Collaborate with IA Control Assessors, Vulnerability Analysts, and Systems Administrators to align audit findings with operational risk assessments and accreditation requirements.
• Audit reports, compliance summaries, and findings documentation Accreditation and risk assessment validation artifacts; eMASS/ACAS audit and tracking records o Incident and corrective action audit reports; Executive briefings on compliance and risk posture.
• All other duties as assigned.

 

Education

• BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science is preferred.

 

Certifications

•  GLSC or CISSP is required

 

Physical Requirements

Employees must be able to sit at a workstation for extended periods of time. They should be able to use their hands to handle or feel objects, tools, or controls, as well as reach with their hands and arms. The ability to talk, see, and hear is also required. Employees must be capable of working on a desktop or laptop computer for long durations. Occasionally, they may need to lift and move moderate amounts of weight, typically no more than 20 pounds. Regular and predictable attendance is essential.

 

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.  Alesig will make reasonable accommodations to enable individuals with disabilities to perform the essential functions and in compliance with the Americans with Disabilities Act of 1990.

 

Pre-Employment Screening Requirements

Must be able to successfully complete Alesig Consulting's pre-employment screening process and any additional pre-employment screens required for your position by the client. 

 

If hired for the position, you must be able to provide proof of eligibility to work in the United States.

 

This job description lists the major duties and requirements of the job and is not all-inclusive. Incumbent(s) may be expected to perform job-related duties other than those contained in this document and may be required to have specific job-related knowledge and skills. 

 

Alesig Consulting is an Equal Opportunity/Affirmative Action Employer