IT Audit - Staff

Montcure, LLC
Alexandria, VA, United States
5 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Starter
Experience required
1 year minimum
Compensation
$65,000.0 - $80,000.0
Working hours
Regular working hours

Tech stack

Microsoft Word Microsoft Excel Cyber Security Information Systems Information Technology Audit Microsoft PowerPoint IT General Controls (ITGC) Information Technology

Job description

The IT Audit Staff Analyst supports Technology Risk and IT audit engagements within a Department of Defense or Government & Public Sector environment. As a member of the Technology Risk (IT Audit) team, this role contributes to the delivery of high-quality services supporting financial statement audits, attestation engagements, and IT control assessments. The analyst assists with research, testing of IT general and application controls, and coordination with client personnel while building foundational expertise in information security and IT risk management. This position is ideal for candidates with approximately 1-3 years of IT audit, information assurance, or technology risk experience seeking to grow within a federal audit environment., * Assist in the execution of IT audit procedures supporting financial statement and attestation engagements.

  • Perform testing of IT General Controls (ITGCs), including access management, change management, and system operations controls.
  • Support testing of automated application controls and system interfaces.
  • Conduct research related to IT control frameworks, risk management standards, and security requirements.
  • Prepare clear and accurate documentation of testing procedures and results in accordance with audit standards.
  • Participate in client meetings and support preparation of status updates and deliverables.
  • Establish and maintain productive working relationships with client personnel at appropriate levels.
  • Collaborate with engagement team members to meet milestones and deliver quality results.

Requirements

*Candidates must have the above clearance level and, at a minimum, be able to maintain this clearance during their employment with Montcure., * Bachelor’s degree in Information Systems, Information Technology, Cybersecurity, Accounting (with IT focus), or related field.

Experience

  • Approximately 1-3 years of experience in IT audit, information assurance, cybersecurity, or technology risk.
  • Experience supporting federal, DoW, or public sector clients preferred.

Skills:

  • Working knowledge of IT General Controls and application controls.
  • Basic understanding of risk management, information security, and information assurance concepts.
  • Familiarity with control frameworks such as NIST, FISCAM, or ISO standards preferred.
  • Strong analytical and documentation skills.
  • Proficiency in Microsoft Excel, Word, and PowerPoint.
  • Ability to take a practical approach to solving issues and gaining client agreement.
  • Strong interpersonal skills and ability to collaborate in an inclusive team environment.
  • Effective written and verbal communication skills suitable for client-facing environments.

Preferred Qualifications

  • CISA, Security+, or other relevant IT audit/security certification (or progress toward certification).
  • Experience supporting audits conducted in accordance with GAGAS (Yellow Book).
  • Familiarity with ERP systems or federal financial systems environments.

About the company

Montcure, LLC is a Service-Disabled Veteran-Owned Small Business (SDVOSB) founded with a vision to revolutionize consulting and advisory services through innovative, data-driven solutions. The Montcure team recognize the unique challenges faced by organizations and governments in today’s rapidly evolving business environment.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on jobs.accaglobal.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:24 min

Estimating project expenditures with Azure Pricing Calculator

Radu Vunvulea Radu Vunvulea · WWC 2022

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

3:58 min

Mitigating diverse browser quirks and unsupported clipboard metadata formats

Markus Over Markus Over

5:13 min

Audience Q&A on maturity assessments and external consultants

Mathias Tausig · LIVE

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

59 sec

Proving regulatory compliance to auditors and chief officers

Mike Bursell Mike Bursell · WWC Europe 2026

Videos

See all

Related articles

See all