IT Audit Supervisor

IT Audit Supervisor

Ready to take the next step toward IT audit leadership? Join Castro & Company as an IT Audit Supervisor in our growing Advisory & Accounting practice. You’ll supervise IT audit engagements that support our Federal clients’ mission, guide and develop audit teams, and serve as a trusted advisor to client management. If you’re dedicated and eager to grow your career, we’ll provide a supportive team, resources, and training to help you succeed.

What You’ll Do in This Role:

• Supervise IT Audit Engagements: Plan, coordinate, and oversee IT/FISCAM and FISMA audits, completing engagement tasks within the project scope and budget while meeting deliverable requirements
• Lead Client Meetings: Facilitate walkthroughs and client meetings, coordinate action items, and support Executive-level briefings
• Evaluate IT General Controls: Assess ITGCs using NIST standards and frameworks, including NIST SP 800-53, the NIST Cybersecurity Framework (CSF), and the NIST Risk Management Framework (RMF)
• Perform Audits to Government Standards: Conduct IT and cybersecurity audits in accordance with Generally Accepted Government Auditing Standards (GAGAS)
• Review Audit Workpapers: Evaluate staff- and senior-prepared documentation for accuracy, completeness, and compliance with audit standards
• Identify and Communicate Risk: Analyze IT environments, pinpoint control gaps, and clearly present associated risks and recommendations
• Defend and Support Findings: Lead discussions to support audit conclusions with evidence and detailed analysis
• Analyze Data and Report Results: Create outputs that summarize the client’s IT and cybersecurity posture
• Mentor and Develop Staff: Lead and coach Staff and Senior team members, providing technical direction and feedback to strengthen their professional growth
• Manage Multiple Priorities: Balance several engagements and deadlines at once while maintaining excellent client service
• Apply Federal IT Compliance Frameworks: Use working knowledge of federal standards and guidance, including:
  • FISCAM (Federal Information System Controls Audit Manual)
  • NIST SP 800-53 (Security and Privacy Controls for Federal Information Systems)
  • FISMA (Federal Information Security Modernization Act)

Your Qualifications:

• Bachelor’s degree in Information Systems, Cybersecurity, Accounting, or a related business field
• Minimum of 4 years of experience performing IT audits or IT risk assessments, including IT testing in support of a financial statement audit and/or FISMA audit
• CISA or CISSP certification
• Hands-on experience conducting IT audits in a federal environment
• Experience leading IT audits, including leading walkthroughs and documenting audit workpapers and deliverables
• Experience and strong desire to coach and develop Staff and Senior team members
• Strong understanding of risk management and internal controls across technical and administrative systems
• Excellent written and verbal communication skills, with the ability to document and explain complex IT processes clearly
• Ability to thrive in a fast-paced environment, multitask, and meet multiple deadlines with strong attention to detail
• Strong proficiency in Microsoft Office (Excel, PowerPoint, and Word)
• Security Clearance: Must be able to pass a basic government suitability check (US Citizenship required)

Preferred skills and attributes:

• FISMA audit and/or IT audit experience in support of a financial statement audit, including workpaper review of Staff and Senior team members
• Experience with Microsoft PowerApps

Technical Expertise:

• Solid understanding of federal IT environments, including system architecture, security frameworks, and compliance standards
• Experience auditing or working with systems such as:
  • Mainframe systems
  • Microsoft environments (Active Directory, Windows Server, Azure)
  • Amazon Web Services (AWS)
  • Oracle databases and ERP systems
• Ability to assess and document administrative and technical controls across diverse platforms

Salary Range: $95K-$120K
Final compensation will be determined based on a range of factors, including relevant experience, education, work location, security clearance level, certifications, and other factors permitted by applicable law. Salary ranges listed reflect the Washington, DC metropolitan area.

Serving Federal Government clients, Castro & Company is a dedicated Audit, Advisory and Information Technology firm headquartered in Alexandria, Virginia. We are dedicated to helping our clients accomplish their strategic goals while providing our people with a diverse and inclusive environment to thrive and succeed. Castro & Company employees are part of a learning culture with challenging career development opportunities. We encourage teamwork and collaboration, reward excellence, and respect and value diversity.