Need IT Security Auditor 3 - Local to Richmond, VA

Hope you're doing well. We have an open position for a IT Security Auditor 3. see the details below and let me know your interest. If interested, pl. Share a copy of your resume to hr@vinsysinfo.com along with your salary / rate expectations and the best time to reach you.

Role : IT Security Auditor 3 - Both WEB AND IN PERSON IVS!

Client: SCC - State of Virginia

Location: Richmond, VA (Hybrid) Need candidate within 2hrs drivable distance

Job ID: 768270

Interview Mode: Both Web Cam and In Person Interview

SCC’s Health Benefit Exchange division is seeking an experienced IT Auditor

ON SITE REQUIRED: Tuesday AND Thursday each week

Parking not provided for contractors

Pls note: The manager will conduct first round interviews on TEAMS and then require the TOP candidate in for a follow up IN PERSON (2nd) interview.

SCC’s Health Benefit Exchange division is seeking an experienced IT Auditor

About The Role

The SCC’s Health Benefit Exchange division is seeking an experienced IT auditor to support our transition to a new security standard and strengthen our third-party risk management program. This role will help interpret and implement updated security requirements, conduct audits and assessments of both internal processes and external vendors and partners evaluating controls and recommending improvements.

Responsibilities Include

• Assess current security controls and processes against new CMS, IRS, and SCC security standards.
• Identify gaps and recommend remediation steps to achieve and maintain compliance.
• Plan, lead, and execute development and updates to policies, procedures, and documentation to reflect requirements.
• Design, implement, and train on the process for assessing partners and vendors, ensuring alignment with security standards.
• Develop assessment tools, workflows, and scoring model to evaluate and measure the effectiveness and compliance of vendor and partner security controls.
• Evaluate the security posture of vendors and partners to ensure information security contractual, information sharing, and data sharing agreement requirements are met.
• Test the effectiveness of operational and management controls using interviews, document reviews, and observation.
• Analyze, assess, report, and present on audit findings, risk exposure, and recommendations.
• Support information security continuous monitoring and incident response programs.
• Perform related work as required.
  
  

Skill

Required / Desired

Amount

Experience

Audit and compliance/information security/information technology experience or combination thereof

Required 8 Years

Information Security control audit and assessment experience

Required 4 Years

NIST 800-53 or other security framework

Required 4 Years

Perform testing, analysis, reporting, and develop remediation plans for compliance with operational and management controls

Required 4 Years

Develop and update policies, procedures, and documentation

Required 2 Years

Healthcare, health insurance, or ACA

Desired 2 Years

Industry recognized certification – CISA, CIA, GSNA, CISSP, or equivalent

Desired 2 Years

Question 1 Commonwealth of Virginia security policies prohibit the use of offshore IT contractors. Do you attest to the fact that your candidate will physically reside within the US for the duration of the assignment?

Question 2

Please list candidate's email address.

Question 3

In what city and state does your candidate currently reside? Local Richmond candidates preferred due to ON SITE requirements. If you put they are in Richmond then please upload a copy of their drivers license to verify their local address.

Question 4

ON SITE REQUIRED: Tuesday AND Thursday each week. If selected, does your candidate agree to this arrangement?

Question 5

Pls make sure to highlight or BOLD (on your candidates resume) their exp with any of the REQUIRED and of DESIRED experience /skills - this helps you (and us) to determine their fit for the role.

Question 6

Pls note: The manager will conduct first round interviews on TEAMS and then require the TOP candidate come to their office for a follow up IN PERSON (2nd) interview. If selected, does your candidate agree to this interview arrangement?