Certified Information Systems Auditor (CISA) – Levels III & IV

Job Title: Certified Information Systems Auditor (CISA) – Levels III & IV

Location: Hybrid (3 days onsite Arlington, VA)

Reports To: Partner / Principal

FLSA Status: Exempt, Full-Time

About Eskaton Consulting 

Eskaton Consulting fosters an authentic working culture that enables both employees and clients to thrive. By focusing on personal and business potential, we deliver best-in-class services across Cybersecurity, Technology, Process, and People consulting. Our values Trust, Excellence, Accountability, and Making Moments That Matter drive everything we do, ensuring impactful and purpose-driven solutions. 

Role Summary

We are seeking senior information systems audit professionals to lead engagements for federal clients. In this role, you will serve as a technical authority on IT audit and controls, lead major work assignments, shape the recommendations delivered to client management, and direct the work of more junior team members.

This posting covers two hiring levels. Level III professionals apply comprehensive knowledge across key tasks and high-impact assignments and lead major work assignments as a technical expert. Level IV professionals provide technical and management leadership across major tasks, establish goals and plans that meet project objectives, and make decisions that can critically affect overall project implementation. Both levels may direct or supervise other staff.

Duties/Responsibilities:

Technical Leadership & Team Direction

• Plan and lead major work assignments, serving as a technical expert across multiple project assignments.
• Direct the activities of more junior personnel and other staff as necessary; may supervise others.
• Establish goals and plans that meet project objectives, and evaluate performance results against them.
• Recommend major changes affecting project growth, delivery quality, and success.
• Develop solutions, recommendations, and outcomes for complex client problems where domain expertise has a significant impact on project implementation.

Information Systems Audit & Control Evaluation

• Lead general and application control reviews for simple and complex computer information systems, covering backup and disaster recovery, system development standards, system security, programming and communication controls, operating procedures, and system maintenance.
• Audit computer information systems and oversee detailed evaluations of internal controls.
• Develop and maintain computerized audit software.
• Verify that information technology systems and infrastructure are secure and appropriately support the applications that depend on them.

Key Risk Indicators & IT General Controls

• Assess the design and operational effectiveness of Key Risk Indicators (KRIs) and IT General Controls (ITGCs).
• Provide guidance on KRI and ITGC testing methodology, validation processes, procedures, policy adherence, and documentation.
• Design, develop, and publish materials that support adherence to established KRI and ITGC validation processes.

Findings, Remediation & Compliance

• Follow up on audit findings to confirm that corrective actions have been taken.
• Work closely with Risk, IT, Information Security, and other teams to report, track, and follow up on remediation plans.
• Follow up with clients to confirm implementation of remediation actions.
• Advise clients on maintaining compliance with applicable government standards.

Client Advisory & Communication

• Guide and assist clients through a wide range of improvement and modernization initiatives.
• Create and deliver presentations to management, discussing audit findings and conclusions and recommending remediation actions.
• Consult with clients on information systems operational issues.
• Prepare background papers, briefings, and speeches, and create web and portal content and similar organizational messaging.
• Support clients in the development, implementation, and maintenance of strategy, doctrine, standards, policies, and procedures.

Qualifications:

• Bachelor's degree in a technical discipline.
• Active Secret security clearance, or eligibility to obtain one.
• Experience supporting Department of Defense (DoD) / Department of War (DoW) clients or programs.
• Active Certified Information Systems Auditor (CISA) certification.

Experience — Level III

• 8+ years of general information systems audit experience, including at least 5 years auditing the financial systems of federal government agencies or preparing federal agencies for audit.
• Applies comprehensive knowledge across key tasks and high-impact assignments.
• Plans and leads major work assignments; evaluates performance results and recommends major changes affecting near-term project growth and success.
• Functions as a technical expert across multiple project assignments.
• Directs the activities of more junior personnel or other staff as necessary; may supervise others.

Experience — Level IV

• 12+ years of general information systems audit experience, including at least 8 years auditing the financial systems of federal government agencies or preparing federal agencies for audit.
• Provides technical and management leadership on major tasks and work assignments.
• Establishes goals and plans that meet project objectives.
• Brings domain and expert technical knowledge, with extensive experience developing solutions, recommendations, and outcomes.
• Exercises decision-making and applies domain knowledge that may have a critical impact on overall project implementation.
• Directs the activities of more junior personnel or other staff as necessary; may supervise others.

Preferred Qualifications: 

• Experience leading federal information systems audits or audit-readiness efforts.
• Experience serving as a technical authority on IT General Controls and Key Risk Indicators across concurrent engagements.
• Experience mentoring, developing, or formally supervising IT audit staff.
• Experience establishing or improving audit methodology, validation processes, and supporting guidance materials.
• Experience presenting findings, conclusions, and remediation recommendations to senior client management.
• Experience leading improvement or modernization initiatives in a federal IT environment.

Required Skills/Abilities: 

• Comprehensive knowledge of information systems audit practices, IT general and application controls, and IT risk and security concepts.
• Strong familiarity with federal financial systems and the standards governing federal audits.
• Ability to plan, sequence, and lead major work assignments and hold delivery to schedule and quality expectations.
• Ability to determine methodology and approach independently and to resolve complex control issues.
• Ability to translate technical audit findings into clear recommendations for senior, often non-technical, audiences.
• Ability to direct, coach, and review the work of more junior staff.
• Strong written and verbal communication skills, including the preparation and delivery of briefings and presentations.
• Sound judgment in situations where decisions carry significant consequences for project outcomes.

Physical Requirements: 

• Ability to work extended periods at a computer and participate in virtual and in-person client engagements.

Why Join Eskaton Consulting?

At Eskaton Consulting, we offer more than a role—we provide the opportunity to: 

• Work in a purpose-driven, inclusive environment aligned with your values 
• Support visionary leadership and help shape the culture and direction of the firm 
• Be part of a growing company that values Trust, Excellence, Accountability, and Making Moments That Matter 

Eskaton Consulting is an Equal Opportunity Employer

We value diversity and inclusion in our workforce and do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or any other protected characteristic. 

We are committed to creating a welcoming and supportive environment for all employees!