Security Auditor

This role is part of a proposal submission. All offers of employment are conditional and subject to the awarding of the contract. The company reserves the right to modify delay or cancel the recruitment process based on the outcome of the award.

Location: Hybrid Washington DC
Job Type: W-2
Shift: MondayFriday; 40-hour work week during DFC core hours of 7:00 AM6:00 PM ET; after-hours assignments possible

Worksite Address: DFC HQ 1100 New York Avenue NW Washington DC
Pay Max: $132500
Security Clearance: Tier 4 High Trust Background Investigation
Direct Reports: 0
Travel Requirements: None

Ryan Consulting Group Inc. is seeking a Security Auditor to support the U.S. International Development Finance Corporation (DFC). The Security Auditor is responsible for assessing and auditing complex information systems platforms and operating procedures in accordance with established corporate standards for efficiency accuracy and security. This role evaluates IT infrastructure for organizational risk establishes controls to mitigate loss and recommends improvements to existing risk management controls and the implementation of system changes or upgrades.

Key responsibilities include:

Monitor security tools including Splunk Tenable Qualys and ServiceNow.

Support assigned Risk Management Framework (RMF) activities.

Analyze vulnerability scans and prepare assessments and recommendations for reducing risks and vulnerabilities.

Identify issues to be addressed within the Risk Register Plans of Action and Milestones (POA&Ms) and audit artifacts to enhance the security posture of DFC systems.

Assess and audit complex information systems platforms and operating procedures for efficiency accuracy and security.

Evaluate IT infrastructure for organizational risk.

Establish and evaluate controls designed to mitigate organizational loss.

Determine and recommend improvements to current risk management controls and the implementation of system changes or upgrades.

Bachelors degree in Information Technology Information Systems Computer Science Information Assurance or a related field.

47 years of experience performing IT system security documentation preferably within the federal government.

In-depth knowledge of NIST OMB other federal cybersecurity governance standards and the Risk Management Framework (RMF).

Strong written and verbal communication skills with demonstrated ability to document processes and procedures.

Certification Requirements

One of the following:

Certified Information Security Manager (CISM)

Certified Information Systems Auditor (CISA)

Benefits at RYAN

RYAN offers a comprehensive competitive benefits package designed to support the well-being of our employees and their families. Some benefits may vary by contract.

Paid Holidays (varies by contract)

Paid Time Off (PTO)

Bereavement Military and Parental Leave

401(k) or Roth Retirement Plan with Employer Matching

Medical Dental and Vision Coverage

Health Savings Account (with employer contribution)

Group Term Life Insurance

Pet Insurance

Employee Discount Perks

Voluntary Life Insurance

Short- and Long-Term Disability

Accident Cancer and Critical Illness Insurance

Equal Employment Opportunity (EEO) Statement:
Ryan Consulting Group Inc. is an equal opportunity employer. We are dedicated to ensuring equal employment opportunities in all aspects of employment including recruitment hiring promotion training compensation benefits and termination. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin disability veteran status or any other characteristic protected by applicable law.

Ryan Consulting Group Inc. is also committed to complying with the Americans with Disabilities Act (ADA) and providing reasonable accommodations for qualified individuals with disabilities. If you need assistance or accommodation due to a disability in the application process please contact .

Drug-Free Workplace Statement:
Ryan Consulting Group Inc. is committed to maintaining a drug-free workplace in compliance with the Drug-Free Workplace Act of 1988 which is a requirement for all federal contractors. We recognize the impact that drug and alcohol abuse can have on the safety health and productivity of our workforce and we are dedicated to providing a work environment that is free from illegal drugs and alcohol. All employment offers are conditional upon successfully passing a drug screening.

Pay Transparency Statement:
Ryan Consulting Group Inc. complies with all relevant pay transparency laws in each state and jurisdiction where we operate. This includes providing salary ranges and pay data in compliance with state or local regulations where applicable. We also ensure that applicants and employees in relevant states are informed of their right to inquire about pay information as required by state or local laws. Employees and applicants in states where pay transparency laws are in effect can expect to be provided with salary information upon request during the hiring process.