IT Audit Lead

Gilder Search Group

Summit Technologies, Inc. is looking for an IT Audit and Risk Management Lead to join our team supporting an important US government agency in the D.C. metro area. This is an exciting opportunity to work with a team responsible for IT Security Risk and Compliance support by providing direct support to the Information System Security and Privacy Officer (ISSPO) in managing and documenting the ongoing security posture of the agency.

The Audit and Risk Management Lead will support IT management with POA&M and Audit management activities. This is an on-site position with potential for remote work based in Washington, DC.

Candidates must be eligible for a Public Trust clearance. Duties and Responsibilities: Support IT Governance, Risk and Compliance (GRC) and Audit activities.

Manage day-to-day audit support activities, including providing PBCs, scheduling walkthroughs, and developing audit briefings. Develop and deliver audit programs and training to improve consistency and quality.

Build strong relationships with clients and internal departments to understand IT security challenges and opportunities. Support the creation of audit management best practices, tools, and drive audit remediation efforts.

Lead responses to audits by OIG and other agencies (e.g., IRS, DHS). Write narratives, gather, and vet evidence to formally close audit recommendations.

Review IT security artifacts for submission to federal leadership and auditing agencies (e.g., Office of Inspector General). Oversee the creation, execution, and closure of POAMs (Plans of Action and Milestones).

Identify and analyze issues from control assessments and audit reports requiring remediation. Lead audit finding analysis and collaborate with SMEs to identify possible solutions.

Collaborate with stakeholders and SMEs to develop milestones. Support IT GRC activities, including management of standards, approvals, and waivers.

Provide project management support by preparing status reports, briefings, schedules, and project plans. Oversee security impact analysis, risk assessments, and acceptance processes.

Support the revision of security artifacts in collaboration with SMEs to accurately represent the agency’s security posture. Coordinate and lead cross-team activities to develop comprehensive responses to audit requests, including creating detailed presentations with cross-functional teams.

Required Skills and Experience: Strong time management, multitasking, and attention to detail. Proven leadership skills with experience managing diverse teams.

Excellent collaboration, team-building, and customer service focus. Demonstrated ability to run effective meetings and secure buy-in from executive leaders.

Ability to adapt to changing environments and deadlines, maintaining consistent service. Effective communication skills (oral and written) across all levels, with the ability to present technical content clearly to non-technical audiences.

Ability to work with highly technical content, both preparing and comprehending complex material. Strong analytical and problem-solving skills to assess risks and develop solutions.

Proficiency with Microsoft Office (Word, Excel, Visio, PowerPoint, MS Project) and SharePoint. Ability to review and provide constructive feedback on work products to ensure high-quality deliverables with minimal revisions.

Understanding of and technical experience in IT platforms such as Microsoft, Cisco, Oracle, etc. Understanding of SharePoint lists and workflows which are heavily utilized in this environment.

Education and Experience: Undergraduate degree with 9 years of experience, or Master’s degree with 7 years of experience, or PhD/JD with 4 years of experience. At least 2 years of supporting or performing IT security audits.

Experience managing three or more direct reports. Certifications: Professional certification such as CISSP or CISA.

Strong understanding of NIST Special Publications, including NIST SP 800-53, FISMA, and other audit and security standards. Familiarity with OMB circulars A-123 and A-130, FMFIA, and FISCAM processes and procedures.

Ability to stay current on information technology trends and security standards. Clearance Must be able to obtain a Public Trust clearance.

If you feel you are qualified and want to be considered for this position, please supply the following to: …@crelate.net, and please put the job number ‘6813′ in the subject line: Updated resume including MM/YYYY for each employer. Best times/dates to interview (plus phone you can best be contacted at).

Availability to start once given formal offers. Summit Technologies Inc. appreciates your interest.

We will contact the best matching prospects and will consider you for future opportunities. We will not submit your resume without your prior knowledge and consent.

We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, disability or veteran status.

J-18808-Ljbffraa415a4b-8b21-40fc-a65c-70d2b25ca29a

https://www.jobs2careers.com/click.php?jid=7bc2bf5d39bda3ed639c6b785&ri=9fc897577d77473ebda9320f419c789c&job_loc=Philadelphia%2CPA&q&spl=v1%253AUdeBRYCAbMaeIuAO%253AdQtyWSSyCKa9mxNKyt3VSQ%253D%253D%253AyibYAcuEYBqiL25Ax0IDowW958NfPOYBion9C0f%252B2XcaNawTXHIZ%252FvFJQtBWOvGSe9QYgCBSys83z06k9mC%252Bem%252B%252Fpp7qwnl92FKUErWzJE83CPF7MDCeKOcVI9yJPk%252BTbhiIs1mjyWm%252FfEot%252Fwy6MRQFwE1Wgsr5a0V7OU6Q7C6zL8tWMhqZpKJdRcV6Sonf6Zk3M%252B21YXvXaZclJVOUqzaV6cyQ8a%252Fx%252F%252BApgg%253D%253D&encrypt=0&l=anywhere→

IT Audit Lead

Gilder Search Group

Summit Technologies, Inc. is looking for an IT Audit and Risk Management Lead to join our team supporting an important US government agency in the D.C. metro area. This is an exciting opportunity to work with a team responsible for IT Security Risk and Compliance support by providing direct support to the Information System Security and Privacy Officer (ISSPO) in managing and documenting the ongoing security posture of the agency.

The Audit and Risk Management Lead will support IT management with POA&M and Audit management activities. This is an on-site position with potential for remote work based in Washington, DC.

Candidates must be eligible for a Public Trust clearance. Duties and Responsibilities: Support IT Governance, Risk and Compliance (GRC) and Audit activities.

Manage day-to-day audit support activities, including providing PBCs, scheduling walkthroughs, and developing audit briefings. Develop and deliver audit programs and training to improve consistency and quality.

Build strong relationships with clients and internal departments to understand IT security challenges and opportunities. Support the creation of audit management best practices, tools, and drive audit remediation efforts.

Lead responses to audits by OIG and other agencies (e.g., IRS, DHS). Write narratives, gather, and vet evidence to formally close audit recommendations.

Review IT security artifacts for submission to federal leadership and auditing agencies (e.g., Office of Inspector General). Oversee the creation, execution, and closure of POAMs (Plans of Action and Milestones).

Identify and analyze issues from control assessments and audit reports requiring remediation. Lead audit finding analysis and collaborate with SMEs to identify possible solutions.

Collaborate with stakeholders and SMEs to develop milestones. Support IT GRC activities, including management of standards, approvals, and waivers.

Provide project management support by preparing status reports, briefings, schedules, and project plans. Oversee security impact analysis, risk assessments, and acceptance processes.

Support the revision of security artifacts in collaboration with SMEs to accurately represent the agency’s security posture. Coordinate and lead cross-team activities to develop comprehensive responses to audit requests, including creating detailed presentations with cross-functional teams.

Required Skills and Experience: Strong time management, multitasking, and attention to detail. Proven leadership skills with experience managing diverse teams.

Excellent collaboration, team-building, and customer service focus. Demonstrated ability to run effective meetings and secure buy-in from executive leaders.

Ability to adapt to changing environments and deadlines, maintaining consistent service. Effective communication skills (oral and written) across all levels, with the ability to present technical content clearly to non-technical audiences.

Ability to work with highly technical content, both preparing and comprehending complex material. Strong analytical and problem-solving skills to assess risks and develop solutions.

Proficiency with Microsoft Office (Word, Excel, Visio, PowerPoint, MS Project) and SharePoint. Ability to review and provide constructive feedback on work products to ensure high-quality deliverables with minimal revisions.

Understanding of and technical experience in IT platforms such as Microsoft, Cisco, Oracle, etc. Understanding of SharePoint lists and workflows which are heavily utilized in this environment.

Education and Experience: Undergraduate degree with 9 years of experience, or Master’s degree with 7 years of experience, or PhD/JD with 4 years of experience. At least 2 years of supporting or performing IT security audits.

Experience managing three or more direct reports. Certifications: Professional certification such as CISSP or CISA.

Strong understanding of NIST Special Publications, including NIST SP 800-53, FISMA, and other audit and security standards. Familiarity with OMB circulars A-123 and A-130, FMFIA, and FISCAM processes and procedures.

Ability to stay current on information technology trends and security standards. Clearance Must be able to obtain a Public Trust clearance.

If you feel you are qualified and want to be considered for this position, please supply the following to: …@crelate.net, and please put the job number ‘6813′ in the subject line: Updated resume including MM/YYYY for each employer. Best times/dates to interview (plus phone you can best be contacted at).

Availability to start once given formal offers. Summit Technologies Inc. appreciates your interest.

We will contact the best matching prospects and will consider you for future opportunities. We will not submit your resume without your prior knowledge and consent.

We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, disability or veteran status.

J-18808-Ljbffraa415a4b-8b21-40fc-a65c-70d2b25ca29a

https://www.jobs2careers.com/click.php?jid=7bc2bf5d39bda3ed639c6b785&ri=9fc897585a5a4465b9ecd8aef299243a&job_loc=Philadelphia%2CPA&q&spl=v1%253A%252Fc3T%252Fc5TNMrjLGmd%253AG5%252FeEEqBp2j6KWRy%252Bd%252BVDQ%253D%253D%253AD2sVpjJq8w%252BI54Q%252BZ%252B5cATL97RXD4G8cDURFmVtDuibeehD1AEM68%252FkCmRAdmhLaDBJL13wmsdDf4UWqw88T8oGZHQgg7TDto7tq4DDoo1ixFfzWxrV%252BwFO13RPnbRAQaQUSgitvYDq9nqYJoO208r07QJ1x6S1BbpGDw4BZreEFfQcorH4BeG7A80uXgOeO6owePDBxB4SJDRgTN8NCq7HabqGD8KK3NpbtRw%253D%253D&encrypt=0&l=anywhere→

IT Audit Lead

Freddie Mac


Join to apply for the IT Audit Lead role at Freddie Mac

4 days ago Be among the first 25 applicants


Join to apply for the IT Audit Lead role at Freddie Mac

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose.



Position Overview:

The Information Systems Audit (ISA) team is part of the Internal Audit Division and provides independent assurance over how Information & Technology risk is managed at Freddie Mac.



Our Impact:

Team members on the ISA team are highly-skilled audit, risk management, and/or technology professionals with a demonstrated ability to provide value added audit and advisory services to Freddie Mac. The team plays a critical role in shaping Freddie Mac’s approach to managing Information & Technology risk by providing independent, objective, and value-added assurance of risk management, governance, and controls.



Your Impact:

The IT Audit Project Management Lead will be part of this team and focus on executing end-to-end audit services on Information & Technology risk. This spans over multiple areas while reviewing Freddie Mac’s core business processes down to delivering audits directed on core Information Technology General Controls. As part of the Third Line of Defense the candidate will work closely with risk partners in the Second Line of Defense and practitioners in the First Line of Defense in both the lines of business and Information Technology.



Your Work Falls into Three Primary Categories:

Audit/Project Execution


  • Work independently or as part of an audit teams and ensure work is completed on time and in keeping with professional standards.
  • Perform and document work such as procedure development, walkthroughs and controls testing in accordance with Internal Audit standards.
  • Provide consultative advice to business and IT management on current or emerging Information & Technology risk, control and governance matters.
  • Based on the work performed, identify and draft strategic, business focused issues and effectively communicate results to relevant stakeholders.
  • Conduct internal training sessions to share knowledge and best practices.

Project Management


  • Maintain, track and communicate project status to stakeholders.

Project Performance Lead


  • Within the context of individual audits, perform related tasks such as coaching and project performance evaluations.


Qualifications:

  • Minimum of 6 years working experience. Experience must include a minimum of 4 years auditing Information & Technology risks in a large IT environment
  • Relevant degree in Management Information Systems, Business Administration with an emphasis in Technology, Computer Science, Accounting Information Systems or related discipline
  • Implementation experience or compliance review experience of industry standards to include COBIT, NIST, ISO, or ITIL
  • Platform, middleware, and application audit experience to include experience with the various levels of the OSI model and technologies including Windows, Unix and, Oracle.
  • Basic knowledge of cloud-based tools, applications and vendors such as AWS, Azure, or Google.
  • Working knowledge of various change and project management methodologies (SDLC, Agile).
  • Preferred CISA, CPA, CIA, PMP, CRISC, CISM, CISSP.
  • Experience with data analytics and supporting tools (Tableau, SAS, Python) – preferred.
  • Privacy and Information security risk compliance experience with regulatory environments including GDPR or CCPA – preferred.

Keys to Success in this Role:


  • Must work well in a team-oriented environment as well as individually.
  • Must work creatively and analytically in a problem-solving environment.
  • Must demonstrate effective verbal and written communication and interpersonal skills.

Current Freddie Mac employees please apply through the internal career site.


We consider all applicants for all positions without regard to gender, race, color, religion, national origin, age, marital status, veteran status, sexual orientation, gender identity/expression, physical and mental disability, pregnancy, ethnicity, genetic information or any other protected categories under applicable federal, state or local laws. We will ensure that individuals are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

A safe and secure environment is critical to Freddie Mac’s business. This includes employee commitment to our acceptable use policy, applying a vigilance-first approach to work, supporting regulatory mandates, and using best practices to protect Freddie Mac from potential threats and risk. Employees exercise this responsibility by executing against policies and procedures and adhering to privacy & security obligations as required via training programs.



CA Applicants: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.


Notice to External Search Firms: Freddie Mac partners with BountyJobs for contingency search business through outside firms. Resumes received outside the BountyJobs system will be considered unsolicited and Freddie Mac will not be obligated to pay a placement fee. If interested in learning more, please visit www.BountyJobs.com and register with our referral code: MAC.



Time-type:Full time

FLSA Status:Exempt


Freddie Mac offers a comprehensive total rewards package to include competitive compensation and market-leading benefit programs. Information on these benefit programs is available on our Careers site.

This position has an annualized market-based salary range of $129,000 – $193,000 and is eligible to participate in the annual incentive program. The final salary offered will generally fall within this range and is dependent on various factors including but not limited to the responsibilities of the position, experience, skill set, internal pay equity and other relevant qualifications of the applicant.



Seniority level

  • Seniority level

    Mid-Senior level


Employment type

  • Employment type


    Full-time


Job function

  • Job function

    Accounting/Auditing and Finance


Referrals increase your chances of interviewing at Freddie Mac by 2x


Get notified about new IT Audit Specialist jobs in Dallas, TX.



Irving, TX $60,000.00-$65,000.00 1 week ago



Irving, TX $86,600.00-$144,400.00 1 week ago



Dallas, TX $116,700.00-$196,100.00 3 weeks ago


Audit (Technology and Engineering) | Analyst | Dallas

Sr. IT Auditor Consultant, Hospital Medical Device IT Controls (BHJOB22048_756)



Dallas, TX $75,000.00-$83,000.00 2 months ago

Lead Information Technology Governance Analyst

SOX Control Tester contract opportunity (Remote/Onsite)

IAM Analyst – Identity and Access Management

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.



#J-18808-Ljbffr

https://www.jobs2careers.com/click.php?jid=7ebded70ac8da3ed49925b635&ri=9f65d547729341b3889aa551e34b0a0a&job_loc=Dallas%2CTX&q&spl=v1%253A%252BZsTqSGWwV8abzxX%253AydSL4OL9ojbSoycBQd9gcQ%253D%253D%253AzFKOEjDzjpQJUQpMJ7ihLhJBq7tJ1chMgq8rSIn9%252FXkHKAsCqfUZ4K7M9fU6%252BRaXZF0muM9xQprwIZ0u35RQm2T%252B3Z8SqeWOpFKGXurVhad23dTYTuRmN6G1%252B3l947Imdus2rTIE3hxNHfx4Zlb2W8NUuyOxPqjNHa886k7kqpwI%252FGOPLK%252FYVG16%252FenXDBjffLxNvOKBX1jE5FECvX0RVCyBjQTKThYXX0RVflDsHvuArCp7tfXw5IUzHU11gwo%253D&encrypt=0&l=anywhere→