Security Auditor

Description

This role is part of a proposal submission. All offers of employment are conditional and subject to the awarding of the contract. The company reserves the right to modify, delay, or cancel the recruitment process based on the outcome of the award.

Location: Hybrid – Washington, DC
Job Type: W-2
Shift: Monday–Friday; 40-hour work week during DFC core hours of 7:00 AM–6:00 PM ET; after-hours assignments possible

Worksite Address: DFC HQ 1100 New York Avenue NW Washington, DC
Pay Max: $132,500
Security Clearance: Tier 4 High Trust Background Investigation
Direct Reports: 0
Travel Requirements: None

Ryan Consulting Group, Inc. is seeking a Security Auditor to support the U.S. International Development Finance Corporation (DFC). The Security Auditor is responsible for assessing and auditing complex information systems, platforms, and operating procedures in accordance with established corporate standards for efficiency, accuracy, and security. This role evaluates IT infrastructure for organizational risk, establishes controls to mitigate loss, and recommends improvements to existing risk management controls and the implementation of system changes or upgrades. 

Key responsibilities include:

· Monitor security tools including Splunk, Tenable, Qualys, and ServiceNow. 

· Support assigned Risk Management Framework (RMF) activities. 

· Analyze vulnerability scans and prepare assessments and recommendations for reducing risks and vulnerabilities. 

· Identify issues to be addressed within the Risk Register, Plans of Action and Milestones (POA&Ms), and audit artifacts to enhance the security posture of DFC systems. 

· Assess and audit complex information systems, platforms, and operating procedures for efficiency, accuracy, and security. 

· Evaluate IT infrastructure for organizational risk. 

· Establish and evaluate controls designed to mitigate organizational loss. 

· Determine and recommend improvements to current risk management controls and the implementation of system changes or upgrades. 

Requirements

· Bachelor’s degree in Information Technology, Information Systems, Computer Science, Information Assurance, or a related field. 

· 4–7 years of experience performing IT system security documentation, preferably within the federal government. 

· In-depth knowledge of NIST, OMB, other federal cybersecurity governance standards, and the Risk Management Framework (RMF). 

· Strong written and verbal communication skills with demonstrated ability to document processes and procedures. 

Certification Requirements

One of the following:

· Certified Information Security Manager (CISM) 

· Certified Information Systems Auditor (CISA) 

Benefits at RYAN

RYAN offers a comprehensive, competitive benefits package designed to support the well-being of our employees and their families. Some benefits may vary by contract.

· Paid Holidays (varies by contract) 

· Paid Time Off (PTO) 

· Bereavement, Military, and Parental Leave 

· 401(k) or Roth Retirement Plan with Employer Matching 

· Medical, Dental, and Vision Coverage 

· Health Savings Account (with employer contribution) 

· Group Term Life Insurance 

· Pet Insurance 

· Employee Discount Perks 

· Voluntary Life Insurance 

· Short- and Long-Term Disability 

· Accident, Cancer, and Critical Illness Insurance 

Equal Employment Opportunity (EEO) Statement:
Ryan Consulting Group, Inc. is an equal opportunity employer. We are dedicated to ensuring equal employment opportunities in all aspects of employment, including recruitment, hiring, promotion, training, compensation, benefits, and termination. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by applicable law.

Ryan Consulting Group, Inc. is also committed to complying with the Americans with Disabilities Act (ADA) and providing reasonable accommodations for qualified individuals with disabilities. If you need assistance or accommodation due to a disability in the application process, please contact [email protected]. 

Drug-Free Workplace Statement:
Ryan Consulting Group, Inc. is committed to maintaining a drug-free workplace, in compliance with the Drug-Free Workplace Act of 1988, which is a requirement for all federal contractors. We recognize the impact that drug and alcohol abuse can have on the safety, health, and productivity of our workforce, and we are dedicated to providing a work environment that is free from illegal drugs and alcohol. All employment offers are conditional upon successfully passing a drug screening. 

Pay Transparency Statement:
Ryan Consulting Group, Inc. complies with all relevant pay transparency laws in each state and jurisdiction where we operate. This includes providing salary ranges and pay data in compliance with state or local regulations where applicable. We also ensure that applicants and employees in relevant states are informed of their right to inquire about pay information as required by state or local laws. Employees and applicants in states where pay transparency laws are in effect can expect to be provided with salary information upon request during the hiring process.