Information Systems Auditor (CISA Preferred)

Company: Silverthorne Advisory Group
Location: Scott Air Force Base, IL (On-site)
Clearance Requirement: Active Secret Clearance (Sponsorship Available)
Experience Level: 3+ Years
Employment Type: Full-Time/ Salaried


About the Role


Silverthorne Advisory Group is seeking an Information Systems Auditor (CISA Preferred) to support growing opportunities within the Defense sector. The successful candidate will evaluate information technology controls, cybersecurity safeguards, governance processes, and enterprise risk management programs while supporting federal financial management, audit readiness, and digital modernization initiatives.


In this role, you will perform risk-based IT audits, assess the effectiveness of IT General Controls (ITGCs), application controls, and cybersecurity controls, and develop recommendations to strengthen security, compliance, and operational efficiency. You will work closely with cybersecurity professionals, IT teams, finance organizations, business stakeholders, and external auditors to identify technology risks and improve internal controls.


This position offers an opportunity to combine information systems auditing, cybersecurity, data analytics, and emerging artificial intelligence capabilities in support of high-impact federal and Defense missions.


Key Responsibilities

• Plan, execute, and document risk-based information systems audits and technology risk assessments.
  
  
• Evaluate IT General Controls (ITGCs), application controls, automated business processes, and financial system controls.
  
  
• Assess cybersecurity safeguards, identity and access management, data protection, and privileged access controls.
  
  
• Identify control deficiencies, security vulnerabilities, compliance gaps, and opportunities for risk mitigation.
  
  
• Prepare audit workpapers, document findings, develop recommendations, and communicate results to stakeholders.
  
  
• Track corrective actions and validate remediation efforts to ensure identified issues are addressed.
  
  
• Support compliance with applicable federal regulations, cybersecurity standards, and audit frameworks, including NIST, FISMA, COBIT, FISCAM, and FedRAMP.
  
  
• Review change management, configuration management, backup and recovery, disaster recovery, and business continuity controls.
  
  
• Evaluate security controls across cloud environments, enterprise applications, databases, and IT infrastructure.
  
  
• Assess logging and monitoring, incident response, vulnerability management, and security operations practices.
  
  
• Support internal and external audits, compliance assessments, and regulatory examinations.
  
  
• Collaborate with IT, cybersecurity, finance, and business teams to strengthen governance, internal controls, and audit readiness.
  
  
• Identify opportunities to leverage data analytics, automation, and artificial intelligence to improve audit testing and operational efficiency.
  
  
• Stay informed about evolving cybersecurity threats, regulatory requirements, and industry best practices.
  
  

Required Qualifications

• Minimum of 3 years of experience in IT auditing, information security, cybersecurity, technology risk management, internal audit, or technology consulting.
  
  
• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Information Technology, or a related field.
  
  
• U.S. citizenship and an active Secret security clearance. Clearance sponsorship may be available for qualified candidates.
  
  
• Experience performing IT General Controls (ITGC) testing and technology risk assessments.
  
  
• Knowledge of relevant control frameworks and standards, including NIST Cybersecurity Framework, NIST SP 800-53, NIST SP 800-171, COBIT, COSO, and FISCAM.
  
  
• Experience evaluating logical access, identity and access management, change management, configuration management, and backup and recovery controls.
  
  
• Understanding of cybersecurity principles, internal controls, compliance requirements, and enterprise risk management.
  
  
• Experience documenting audit procedures, preparing findings, and developing actionable recommendations.
  
  
• Strong analytical, problem-solving, organizational, and written and verbal communication skills.
  
  
• Ability to manage multiple priorities, work independently, and collaborate effectively in a fast-paced consulting environment.
  
  

Preferred Qualifications

• Certified Information Systems Auditor (CISA) certification.
  
  
• Experience supporting Department of War (DoW), federal civilian, or Intelligence Community clients.
  
  
• Familiarity with FISMA, FedRAMP, the Risk Management Framework (RMF), CMMC 2.0, GAO Green Book, and OMB Circular A-123.
  
  
• Experience assessing cloud environments, including Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP).
  
  
• Familiarity with enterprise security and business platforms such as Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID, Microsoft Intune, ServiceNow, SAP, Oracle, or Workday.
  
  
• Experience with data analytics, SQL, Power BI, Python, PowerShell, or audit automation tools.
  
  
• Additional certifications such as CISSP, CISM, CRISC, CIA, CPA, CGFM, Security+, or PMP.
  
  
• Experience supporting SOC 1, SOC 2, ISO 27001, PCI DSS, HIPAA, or SOX compliance initiatives.
  
  
• Experience leading audit engagements, mentoring junior team members, or presenting findings to senior leadership.
  
  
• Strong consulting, stakeholder management, and client relationship skills.
  
  

Benefits and Professional Development


Silverthorne Advisory Group offers a competitive benefits package designed to support employee well-being, financial security, and professional growth.

• Health Benefits: Medical, dental, and vision insurance for employees and eligible family members.
  
  
• 401(k) Retirement Plan: 100% company match on employee contributions up to the first 6%, with access to Vanguard Admiral funds.
  
  
• Paid Time Off: Generous paid leave based on length of service.
  
  
• Performance Bonuses: Opportunities to earn bonuses based on individual performance and achievement of company goals.
  
  
• Professional Development: Support for training, continuing education, and professional certifications.
  
  
• Company Events: Team-building activities, company retreats, and professional conferences.
  
  

About Silverthorne Advisory Group


Silverthorne Advisory Group provides consulting services supporting federal and Defense missions. Our team helps clients strengthen financial management, improve operational performance, enhance audit readiness, and advance modernization initiatives through practical solutions and emerging technologies.