IT Security Auditor Richmond, VAHybrid
Share
Job Location:
Richmond, VA - USA
Monthly Salary:
Not Disclosed
Posted on:
30+ days ago
Vacancies:
1 Vacancy
Job Summary
IT SecurityAuditor
Richmond VA
ON SITE REQUIRED: Tuesday AND Thursday each week
12 Months
Description:
SCCs Health Benefit Exchange division is seeking an experienced IT Auditor
Parking not provided for contractors
Pls note:
The manager will conduct first round interviews on TEAMS and then require the TOP candidate in for a follow up IN PERSON (2nd) interview.
ABOUT THE ROLE
The SCCs Health Benefit Exchange division is seeking an experienced IT auditor to support our transition to a new security standard and strengthen our third-party risk management program. This role will help interpret and implement updated security requirements conduct audits and assessments of both internal processes and external vendors and partners evaluating controls and recommending improvements.
Responsibilities Include:
- Assess current security controls and processes against new CMS IRS and SCC security standards.
- Identify gaps and recommend remediation steps to achieve and maintain compliance.
- Plan lead and execute development and updates to policies procedures and documentation to reflect requirements.
- Design implement and train on the process for assessing partners and vendors ensuring alignment with security standards.
- Develop assessment tools workflows and scoring model to evaluate and measure the effectiveness and compliance of vendor and partner security controls.
- Evaluate the security posture of vendors and partners to ensure information security contractual information sharing and data sharing agreement requirements are met.
- Test the effectiveness of operational and management controls using interviews document reviews and observation.
- Analyze assess report and present on audit findings risk exposure and recommendations.
- Support information security continuous monitoring and incident response programs.
- Perform related work as required.
Key Skills
- IT Experience
- ISO 27001
- Risk Management
- COSO
- IT Auditing
- PCI
- COBIT
- NIST Standards
- SOX
- Information Security
- Internal Audits
- FISMA
