Job Seekers, Please send resumes to resumes@hireitpeople.com Short Description:   IT Security Auditor***Local candidates STRONGLY preferred***
Complete Description:  Overall, the IT Security Audit will assess the effectiveness of controls over five of DPOR's applications and compliance with Commonwealth of Virginia (COV) IT Information Security Policy (SEC 519-00), IT Information Security Standard (SEC501-07.1) , IT Security Audit Standard (SEC502-02.1, IT Systems Management Procedures for DPOR applications,  and any legal requirements and best practices.  Specifically, the objectives of the IT System Audit are to determine whether the IT security controls for the three applications are documented and provide reasonable assurance that: 
1.     Physical access to the production environment, stored data, and documentation is restricted to prevent unauthorized destruction, modification, disclosure, or use. 2.     Logical access to the production environment, data files, and sensitive system transactions, is restricted to authorized users only. 3.     The production environment is protected against environmental hazards and related damage. 4.     Regularly scheduled processes that are required to maintain continuity of operations in the event of a catastrophic loss of data, facilities, or to minimize the impact of threats to data, facilities or equipment, are performed as scheduled. 5.     Roles and responsibilities are adequately defined, documented and assigned to persons with an adequate technical training and role based IT Security technical training is planned and received. 6.     System hardening measures have been applied to the applications adequate to protect them against risks to which it is exposed.
SKILLS:• Significant IT security audit experience• Working knowledge and understanding of Commonwealth of Virginia IT security standards• Exceptional written and verbal communication skills required to interact effectively with all levels of the organization.
Additional Requirements:
 Certification as a CISA or CPABachelors Degree in Information Systems or related area plus three years experience or six years overall experience.

SkillRequired / DesiredAmountof ExperienceIT security audit experience in large structured environmentsRequired7YearsWorking knowledge and understanding of Commonwealth of Virginia IT security standardsRequired5YearsExceptional written and verbal communication skills required to interact effectively with all levels of the organization.Required7YearsCISA certificationRequired1Days