IT Audit Lead - FISCAM & FISMA Compliance

IT Audit Lead/Internal Controls Tester
Reston, VA

Security Clearance Requirement: Current TS/SCI
Location Note: On-Site Support Required

Position Description:
The IT Audit Lead will lead complex audits and compliance initiatives designed to strengthen the organization’s information security posture across federal and national security environments. This role is responsible for planning, executing, and reporting on internal control assessments aligned to FISCAM, NIST SP 800-53, OMB Circular A-123, and the Federal Information Security Modernization Act (FISMA). The ideal candidate brings proven experience advising CIO, CISO, Inspector General, and Audit Committee leadership on audit readiness, control maturity, and remediation strategies supporting an unqualified Statement of Assurance.

Duties & Responsibilities:
The It Audit Lead/Internal Controls Tester will have a role in working directly with clients and other organizational stakeholders to support IT internal control efforts, including audits/assessments, remediation, and other ad-hoc efforts. Specific duties and responsibilities:

• Lead enterprise IT audits and internal control reviews across national security and high-impact federal systems, ensuring compliance with FISCAM and NIST standards.
• Oversee FISMA program execution, including control testing, POA&M management, risk scoring, and continuous monitoring activities.
• Manage annual Statement of Assurance development and governance of supporting evidence, risk ratings, and remediation outcomes.
• Direct audit planning, scoping, walkthroughs, and ITGC/ITAC testing for financial and operational systems.
• Translate complex cyber and IT risks into clear, actionable recommendations for senior leadership.
• Present audit results, dashboards, and remediation status to CIO organizations, Audit Committees, and oversight bodies.
• Build and mentor high-performing compliance and internal control teams; drive accountability and continuous improvement.
• Develop and mature enterprise IT governance frameworks, incorporating emerging risks, automation, and performance metrics.

Qualifications:

• 10+ years leading IT audit and internal control programs in federal or highly regulated sectors; national security experience preferred
• Deep knowledge of FISCAM, FISMA, NIST SP 800-53, OMB A-123, and FMFIA requirements
• Demonstrated success supporting unqualified Statements of Assurance
• Strong communication skills with executive-level reporting experience
• Active security clearance (or eligibility), preferred
• Professional certifications such as CISA, or PMP highly desired

Recommended:

• Experience performing: Federal Information System Controls Audit Manual (FISCAM), Financial Improvement Audit Remediation (FIAR) and Federal Information Security Management Act (FISMA) security reviews
• CISA or CIA certification
• 1-2 years of Federal or DOD IT audit experience

Education:

• High School Diploma/GED and 12 years of experience
• Bachelor’s degree and 5 years of experience

E-volve Technology Systems salaries are determined by various factors, including but not limited to location, the candidates’ education, skills, experience, and competencies, as well as contract-specific funding and organizational requirements. The projected compensation range for this position is $172,000 to $192,000 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of E-volve's total compensation package for employees.

E-volve Technology Systems, Inc. provides Mission Operations, Information Technology Management, and Intelligence Analysis support services to advance National Security and other Federal Government programs within the Department of Defense (DoD), Intelligence, and Civilian government agencies. For more information please visit us at

E-volve Technology Systems, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. We comply with Form I-9 identity and legal work authorization requirements for Employment Eligibility Verification in accordance the Immigration Reform and Control Act of 1986 (IRCA).

E-volve Technology Systems, Inc. offers fair and competitive compensation and benefits to all eligible employees. Salaries are dependent upon a wide range of factors including position requirements, customer/program needs, individual qualifications, education, experience, certification and/or training, location, and other job-related factors.

Please email any questions to: [email protected]