A mid-level IT Auditor is required to support the OIG’s Information Technology Audits Division with its review of USAID’s network defenses, which will include external network penetration testing, and an internal vulnerability assessment of USAID’s network performed. That review will be conducted by a technical contractor, but OIG will take ownership of the work. The IT Auditor’s specific work will include assisting the OIG lead with planning, fieldwork, and reporting on all phases in accordance with standards, ensuring adherence to the U.S. Government Accountability Office’s Government Auditing Standards or Council of Inspectors General on Integrity and Efficiency’s Quality Standards for Inspection and Evaluation. The IT Auditor will assist in developing and documenting the plan in OIG’s audit and evaluation documentation system, TeamMate. The IT Auditor will also develop and document detailed workpapers in TeamMate, ensuring accuracy, completeness, and compliance with standards. The IT Auditor will be responsible for preparing sections of a detailed report that summarizes findings in accordance with standards, including recommendations. That IT Auditor’s report sections must be clear, concise, and comprehensive, using layman’s terms for review by all stakeholders. Generally, the IT Auditor will work Monday through Friday between 8:30 am and 5 pm Eastern Standard Time. However, during the fieldwork phase, the IT Auditor’s hours may need to be adjusted (e.g., evenings, or early mornings, or weekends), if required for the technical contractor to complete its work. Generally, the IT Auditor will work remotely but may need work onsite in SAID locations in the Washington, DC, metropolitan area, to support the technical contractor.

The auditor will attend meetings, review contractor deliverables, and prepare work papers in the OIG’s audit documentation system for assigned Federal Information Security Modernization Act of 2014 (FISMA) or other oversight engagements. In addition, the auditor will be responsible for completing assigned work for all phases of in-house audits, evaluations, and inspections. The auditor must work independently and have experience in leading or managing audits in accordance with generally accepted government auditing standards. While it is preferred that the auditor have experience and knowledge in providing oversight of contracted audits, it is not required. The auditor may work remotely from anywhere in the United States, as agreed to by the COR and relevant agency policy. However, work hours are Monday through Friday between 7 am and 5 pm Eastern Standard Time, unless otherwise approved by the responsible OIG division audit manager. This individual will have at least five (5) years of work experience.