795975 - IT Security Auditor - Petersburg VA

All,

 

Please rush qualified resumes for the below requirement along with consultant’s best all-inclusive C2C rate, availability and direct contact information.

 

Position: IT Security Auditor

Location: Petersburg VA

Duration: 6 Months

All-inclusive C2C Rate Cap: $65/hr

 

Description:

·         The client is seeking a qualified resource to perform and/or assist with conducting IT security audits of sensitive IT systems for compliance with COV ITRM IT Security Policy SEC500-02 and ITRM IT Security Standard SEC501-01 on required components (to include but not limited to Personnel Security and Facilities Security, and Personnel Security). It will be part of this Auditor's job to prioritize/coordinate this project from initial planning to final phases of completion.

·         Once onboard, the IT Security Auditor will be expected to focus on wrapping up the survey phase of the Personnel Security audit and commence with testing the University's compliance with the specific VITA security requirements for Personnel Security. The specifics or audit objectives for the Personnel Security are:

o   Access determination controls are in place to restrict access to IT systems and data to authorized individuals according to the principle of least privilege,

o   Security awareness and training is sufficient to provide IT system managers, administrators, and users with awareness of system security requirements and of their responsibilities to protect IT systems and data,

o   Acceptable use of IT systems is appropriately defined and proper controls are in place to enforce acceptable use,

o   Sensitive email relative to confidentiality and integrity is properly encrypted when transmitted, and appropriate email disclaimer has been adopted.

·         Candidate will not only be responsible for performing the survey phase, developing an audit program, drafting findings/recommendations, and creating draft reports but will also be responsible for testing of internal controls and assisting with other related (IT Audit Security) projects as needed.

 

Skills & Experience Requirement:

·         Possession of CISA preferred, will consider CIA and CPA credentials (with IT Security exp).Must have one or more of these certifications.

·         Graduate of an accredited college or university with major studies in auditing and/or information systems (name of institution must be on the resume)

·         3 to 5 years of recent IT audit experience, preferably in a government and/or university environment with emphasis in conducting security audits in the areas of risk management, IT contingency planning, information systems security, logical access control, data protection, facilities security, personnel security, threat management, and/or IT asset management. Professional references confirming successful past security audit projects will be required.

·         Be able to conduct IT security audits from survey through reporting phases with general supervisory guidance, and document findings.

·         Familiarity with the Commonwealth of Virginia VITA security policies and standards (ITRM Policy SEC500-02: IT Information Security Policy; ITRM Standard SEC501-01: IT Information Security Standard; and SEC502-00: IT Security Audit Standard).

·         Knowledge, understanding, and experience with COBIT framework

·         Familiarity with pertinent industry information technology guidelines and standards (e.g., NIST, ISO, GTAG)

Other Skills / Comments:

·         Only F2F without phone screen will be conducted and candidates would need to go for F2F on their own.

·         Employment is contingent upon passing a National Criminal background check and the client will initiate fingerprinting for the chosen candidate

·         Local candidates are preferred.

·         References where candidate performed previous (similar) audits will be requested.

 

Many thanks,

Rajesh Jain
Software People Inc.
www.softwarepeople.us
rajesh.jain@softwarepeople.us

Certifications: SBA 8a/SDB, WBENC, NYC MWBE, Empire State MWBE

 

 

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to 'SPINC_Partners Google Group'. To UNSUBSCRIBE from this group, send an email to spinc_partners+unsubscribe@googlegroups.com or 'REPLY' with 'REMOVE' and mention the e-mail address to be removed. 'SPINC_Partners Google Group' apologizes for the inconvenience caused.
-~----------~----~----~----~------~----~------~--~---