> Markdown version of [/jobs/ext/554424-it-audit-senior](https://www.wearedevelopers.com/jobs/ext/554424-it-audit-senior). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Audit Senior - **Company:** Castro & Company, LLC - **Location:** Alexandria, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Active Directory, Amazon Web Services, Microsoft Azure, Cyber Security, Information Systems, Information Technology Audit, Mainframes, Windows Servers, Oracle Databases, Systems Architecture, Privacy Controls, Information Technology - **Published:** June 5, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=a0abea6732878bd7 ## About the Role Do you have experience in Technical writing?, Do you have a Bachelor's degree?, * Bachelor's degree in Information Systems, Cybersecurity, Accounting, or a related field. * Minimum of 2 years of experience performing IT audits or IT risk assessments. * CISA certification preffered. * Hands-on experience conducting IT audits in a federal environment. * Strong understanding of risk management and internal controls across technical and administrative systems. * Excellent written and verbal communication skills, with the ability to document and explain complex IT processes clearly. * Strong project management and time management skills with the ability to meet tight deadlines. * Security Clearance: Must be able to pass a basic government suitability check (US Citizenship required). Technical Expertise: * Solid understanding of federal IT environments, including system architecture, security frameworks, and compliance standards. * Experience auditing or working with systems such as: + Mainframe systems + Microsoft environments (Active Directory, Windows Server, Azure) + Amazon Web Services (AWS) + Oracle databases and ERP systems * Ability to assess and document administrative and technical controls across diverse platforms. * Familiarity with FISCAM, NIST SP 800-53, and FISMA frameworks. ## Description Are you ready to take the next step in your IT audit career? Join Castro & Company as an IT Audit Senior in our growing Advisory & Accounting practice. You'll have the opportunity to work with high-performing teams on federal engagements, leading IT audits and control assessments that make a measurable impact. This is a great opportunity for an experienced professional who is passionate about technology, risk management, and client service to strengthen a key partnership and help reestablish our presence with a valued client. What You'll Do in This Role: * Lead Process Walkthroughs: Facilitate client meetings to assess IT systems, applications, and controls. * Engage Directly with Clients: Serve as a key liaison, building trusted relationships and maintaining open, professional communication throughout the engagement. * Identify and Communicate Risk: Analyze IT environments, pinpoint control gaps, and clearly present associated risks and recommendations. * Defend and Support Findings: Lead discussions to support audit conclusions with evidence and detailed analysis. * Review Audit Workpapers: Evaluate staff-prepared documentation for accuracy, completeness, and compliance with audit standards. * Mentor and Support Staff: Provide guidance, technical direction, and feedback to junior team members to strengthen their professional development. * Apply Federal IT Compliance Frameworks: Utilize working knowledge of federal standards and guidance, including: + FISCAM (Federal Information System Controls Audit Manual) + NIST SP 800-53 (Security and Privacy Controls for Federal Information Systems) + FISMA (Federal Information Security Modernization Act) ## Related Videos - [Grappling With Clunky Old Software? Start by Understanding What’s Inside!](https://www.wearedevelopers.com/videos/1189-grappling-with-clunky-old-software-start-by-understanding-what-s-inside) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cloud as the new mainframe: why the cloud hype does not reflect the dev reality](https://www.wearedevelopers.com/videos/797-cloud-as-the-new-mainframe-why-the-cloud-hype-does-not-reflect-the-dev-reality) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [".Net is too slow" was not an option](https://www.wearedevelopers.com/videos/100176-net-is-too-slow-was-not-an-option) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)