Need IT Security Auditor 3 - Local to Richmond, VA
Need IT Security Auditor 3 - Local to Richmond, VA
Posted on :
22-07-2025
Employer Active
1 Vacancy
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Share
Send me jobs like this
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Job Description
Hope youre doing well. We have an open position for a IT Security Auditor 3. see the details below and let me know your interest. If interested pl. Share a copy of your resume to along with your salary / rate expectations and the best time to reach you.
Role : IT Security Auditor 3 - Both WEB AND IN PERSON IVS!
Client: SCC - State of Virginia
Location: Richmond VA (Hybrid) Need candidate within 2hrs drivable distance
Job ID: 768270
Interview Mode: Both Web Cam and In Person Interview
Role : IT Security Auditor 3 - Both WEB AND IN PERSON IVS!
Client: SCC - State of Virginia
Location: Richmond VA (Hybrid) Need candidate within 2hrs drivable distance
Job ID: 768270
Interview Mode: Both Web Cam and In Person Interview
SCCs Health Benefit Exchange division is seeking an experienced IT Auditor
ON SITE REQUIRED: Tuesday AND Thursday each week
Parking not provided for contractors
ON SITE REQUIRED: Tuesday AND Thursday each week
Parking not provided for contractors
Pls note: The manager will conduct first round interviews on TEAMS and then require the TOP candidate in for a follow up IN PERSON (2nd) interview.
SCCs Health Benefit Exchange division is seeking an experienced IT Auditor
ABOUT THE ROLE
The SCCs Health Benefit Exchange division is seeking an experienced IT auditor to support our transition to a new security standard and strengthen our third-party risk management program. This role will help interpret and implement updated security requirements conduct audits and assessments of both internal processes and external vendors and partners evaluating controls and recommending improvements.
Responsibilities Include:
- Assess current security controls and processes against new CMS IRS and SCC security standards.
- Identify gaps and recommend remediation steps to achieve and maintain compliance.
- Plan lead and execute development and updates to policies procedures and documentation to reflect requirements.
- Design implement and train on the process for assessing partners and vendors ensuring alignment with security standards.
- Develop assessment tools workflows and scoring model to evaluate and measure the effectiveness and compliance of vendor and partner security controls.
- Evaluate the security posture of vendors and partners to ensure information security contractual information sharing and data sharing agreement requirements are met.
- Test the effectiveness of operational and management controls using interviews document reviews and observation.
- Analyze assess report and present on audit findings risk exposure and recommendations.
- Support information security continuous monitoring and incident response programs.
- Perform related work as required.
Skill
Required / Desired
Amount
Experience
Audit and compliance/information security/information technology experience or combination thereof
Information Security control audit and assessment experience
NIST 800-53 or other security framework
Perform testing analysis reporting and develop remediation plans for compliance with operational and management controls
Develop and update policies procedures and documentation
Healthcare health insurance or ACA
Industry recognized certification CISA CIA GSNA CISSP or equivalent
Question 2
Question 3
Question 4
Question 5
Question 6
Employment Type
Full-time
Key Skills
Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.
