> Markdown version of [/jobs/ext/1988762-it-audit-readiness-associate](https://www.wearedevelopers.com/jobs/ext/1988762-it-audit-readiness-associate). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Audit Readiness Associate - **Company:** Kearney & Company - **Location:** Alexandria, VA, United States - **Salary:** $60,000.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Systems, Information Technology Audit, Verification and Validation (Software), Information Technology, Servicenow - **Published:** August 8, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17873413?backUrl=%2Fcareer%2F17873413%2FIt-Audit-Readiness-Associate-Virginia-Alexandria ## About the Role * Bachelor's degree in Cybersecurity, Accounting, Business Administration, Information Systems, or a related field. * Professional communication skills and clear business writing. * Minimum of 1 year of federal client experience and requisite understanding of key NIST publications * Ability to obtain and maintain a U.S. security clearance (requires U.S. citizenship). Preferred Qualifications: * At least one year of external assessment workpaper writing experience, under CIGIE or GAGAS fieldwork requirements. * OMB A-123, OIG FISCAM, OIG FISMA assessment experience. * Diligent One, ServiceNow, ACL or HighBond experience. * CPA * Any relevant professional certification, such as CISA, Security+ * Ability to work from Alexandria, VA office 2 days a week. ## Description Kearney is seeking an IT Audit Readiness Associate to join our team! This position will be responsible for supporting our clients as they modernize their IT systems to ensure compliance with federal IT audit and cyber security standards. They will also support overall client IT audit readiness over IT General and automated applications controls. The associate will perform the following additional responsibilities: * Analyze auditor or assessor requests, identify appropriate documentation in coordination with control owners, and review response for appropriateness and compliance. * Organize, monitor, and follow up on audit requests to provide timely responses. * Review artifacts and draft FMFIA A-123 Appendix A workpapers for supervisor review. * Conduct A-123 walkthroughs, draft client request, communicate findings. * Perform review of Plans of Action and Milestones (POA&Ms) to determine sufficiency to remediate findings. * Perform independent verification and validation (IV&V) of audit finding remediation and clearly document results for management review. * Organize, monitor, and follow up on delayed audit finding remediation. * Exercises intermediate knowledge in the use of technologies/systems. * With supervisor assistance and oversight, prepare for and lead meetings with control owners. * Performs other consulting duties, as needed. * Maintains all continuing Government and non-Government educational requirements, including GAGAS requirements. ## Related Videos - [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment) - [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)