Zero Trust Senior Auditor

2 months ago


Arlington, United States Zermount, Inc Full time
Job DescriptionJob Description

ZERO TRUST SENIOR Auditor (assessor)

MILITARY FRIENDLY & PREFERRED - HOH SPONSOR

Zermount Inc. is seeking a Zero Trust (ZT) Senior Auditor (Assessor) who will be responsible for the oversight, development, and execution of assessments of our client's enterprise and systems to determine the compliance with ZT principles. The ZT Senior Auditor (Assessor will collaborate with cross-functional teams to identify principles that have been implemented correctly and gaps in zero trust principles / security controls to meet compliance with ZT requirements in accordance with CISA Maturity Model, Executive Orders (EO's) (e.g., EO 14028), OMB Mandates (OMB M's) (e.g., OMB M 22-09, M 21-31, etc.) and other Federal Requirements, and Department policies.

Duties & Responsibilities:

The ZT Senior Auditor (Assessor) will provide the following support and services:

  • Perform complex risk analyses which also include risk assessment to identify compliance with ZT, and security requirements based upon the analysis of people, processes, technologies, and requirements of all pillars in the CISA ZTA Maturity Model.
  • Perform assessment and analysis of designs, architectures, configurations, and implementation of ZT principles and security capabilities.
  • Provide recommendations, solutions, and capabilities to ensure the required ZT principles are implemented to meet the requirements of the ZT maturity model and requirements based on EO and OMB M.
  • Review and analyze system, application, or network changes, upgrades and provide input and cybersecurity impacts. Conduct assessment of ZT architectural and configuration changes made by the O&M team(s).
  • Conduct a ZT review and assessment of all existing cybersecurity and IT capabilities. Provide results and reports on:
  • Criteria for Zero Trust readiness and assessment results
  • Conduct analysis to identify gaps in existing capabilities to meet compliance and target ZT maturity model level.
  • Assist with reviewing and interpreting Executive Orders (EOs), OMB memos, Public Law (PL), DHS directives such as Binding Operational Directives (BODs), DHS Undersecretary Memos, NIST SPs, and recommended best practices and provide recommendations and potential solutions to meet requirements.
  • Provide guidance and insights necessary for meeting requirements established through the OMB M's or EO's.
  • Assist and support for all internal and external ZT data calls, requests, audits, compliance, and updates - ensuring accurate information and statuses are obtained and provided.
  • Conduct assessments to determine the implementation of ZT principles across all pillars (identity, device, network, application and workload, and data) to assist the client in meeting the requirements set forth by EO 14028 and OMB M 22-09.
  • Develop and execute assessments of existing security architecture and recommend enhancements using ZT principles and requirements.
  • Provide responses and solutions for ZT related questions, concerns, and issues, providing guidance and strategic recommendations to leadership and other stakeholders, to ensure compliance with ZT, EO and OMB requirements.
  • Collaborate with security engineers, architects, and other IT professionals to design, implement, and maintain ZTA capabilities, and ensure continuous compliance with ZT target maturity model level.
  • Conduct periodic reviews and audits to ensure the proper function of ZT principles/capability implementations and adherence to regulatory requirements.
  • Provide responses to ZT violations, assisting in the investigation and mitigation of weaknesses.
  • Create detailed reports, and briefings outlining the results of ZT assessments, including areas of strength, areas of improvement, and recommendations for moving forward.
  • Stay current with the latest developments in ZT methodologies and related cybersecurity trends.

Qualifications:

  • At least 5 years of experience in cybersecurity, information technology, or related field.
  • Experience and Knowledge of ZT architecture, principles, methodologies, EO 14028, OMB M 22-09, Federal, DoD, and CISA Zero Trust Architecture, Maturity Model, Technical Reference Architectures, NIST, Cloud, and Risk Management Framework (RMF).
  • Strong understanding of zero trust principles and how they can be applied to various types of information systems.
  • Proficient in risk assessment methodologies and security architecture frameworks.
  • Experience with cloud-based environments and technologies.
  • Knowledge of common cybersecurity threats and how to counteract them using ZT principles.
  • Excellent communication skills, with the ability to explain complex concepts in a clear, concise manner.
  • Strong problem-solving skills, with a proactive attitude towards identifying potential issues and implementing solutions.
  • Must be able to conduct system analysis to detect issues with performance.
  • Well versed in developing and implementing IT solutions to resolve technical challenges.
  • Ability to work independently and as part of a team.
  • Ability to navigate complex and politically sensitive client environments with professionalism, patience, and tact.
  • Demonstrated ability to effectively engage and manage relationships with highly political clients while maintaining a professional demeanor, exhibiting patience, and navigating sensitive situations with tact.

Zero Trust Specific Qualifications: Systems Maturity Model


Education:

  • Minimum of a Bachelor of Science (or higher) in one of the following: computer engineering, computer science, IT, cyber security, or a related field.
    • Relevant years of experience may be used in substitution for situations where the candidate does not have a Bachelor's degree in the required field.

Certifications:

  • A minimum of at least one of the following certifications is required: Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certificate of Cloud Security Knowledge (CCSK), Certified Chief Information Security Officer (CCISO), or certification included in DoD 8570.1 IAT Level II or III categories.

Clearance level:

  • Minimum of an active Secret Clearance.

Work Location:

  • Remote.

Hours of Operation:

  • Business Hours: 8:00 am EST - 4:30 pm EST.


  • Arlington, United States Zermount, Inc Full time

    Job DescriptionJob DescriptionZERO TRUST SENIOR Auditor (assessor)MILITARY FRIENDLY & PREFERRED - HOH SPONSORZermount Inc. is seeking a Zero Trust (ZT) Senior Auditor (Assessor) who will be responsible for the oversight, development, and execution of assessments of our client's enterprise and systems to determine the compliance with ZT principles. The ZT...


  • Arlington, United States Zermount, Inc Full time

    Job DescriptionJob DescriptionZERO TRUST SENIOR Auditor (assessor)MILITARY FRIENDLY & PREFERRED - HOH SPONSORZermount Inc. is seeking a Zero Trust (ZT) Senior Auditor (Assessor) who will be responsible for the oversight, development, and execution of assessments of our client's enterprise and systems to determine the compliance with ZT principles. The ZT...


  • Arlington, United States Syms Strategic Group, LLC (SSG) Full time

    Job DescriptionJob DescriptionSyms Strategic Group (SSG) is seeking a talented Senior Zero Trust EngineerDepartment: Veterans AffairsLocation: RemoteType: Full TimeMin. Experience: ExperiencedSecurity Clearance Level: Public Trust (MBI) Military Veterans are highly encouraged to apply! Essential Duties and ResponsibilitiesMust be Clearable to Receive...

  • Zero Trust Architect

    3 weeks ago


    Arlington, United States Syms Strategic Group, LLC (SSG) Full time

    Job DescriptionJob DescriptionSyms Strategic Group (SSG) is seeking a talented Zero Trust ArchitectDepartment: Veterans AffairsLocation: RemoteType: Full TimeMin. Experience: ExperiencedSecurity Clearance Level: Public Trust (MBI) Military Veterans are highly encouraged to apply! Essential Duties and ResponsibilitiesMust be Clearable to Receive Access...


  • Arlington, United States Koniag Management Solutions Full time

    **KMS** **Job ID 2445081** **Koniag Management Solutions,** a Koniag Government Services company, is seeking a Zero Trust Policy and Governance Specialist with an active TS/SCI clearance to support **KMS** and our government customer at the Pentagon, Arlington, VA. **This is a Hybrid position, 4-days onsite and 1-day remote.** We offer competitive...


  • Arlington, United States Zermount, Inc Full time

    Job DescriptionJob DescriptionZERO TRUST APPLICATIONS AND WORKLOADS SMEMILITARY FRIENDLY & PREFERRED - HOH SPONSOrZermount Inc. is seeking a Zero Trust (ZT) Applications and Workloads SME to assist in providing security to one of our federal clients. The ZT Applications and Workloads SME will be part of the implementation of ZT principles across the pillars...


  • Arlington, United States Zermount, Inc Full time

    Job DescriptionJob DescriptionZERO TRUST APPLICATIONS AND WORKLOADS SMEMILITARY FRIENDLY & PREFERRED - HOH SPONSOrZermount Inc. is seeking a Zero Trust (ZT) Applications and Workloads SME to assist in providing security to one of our federal clients. The ZT Applications and Workloads SME will be part of the implementation of ZT principles across the pillars...


  • Arlington, United States Zermount, Inc Full time

    Job DescriptionJob DescriptionZERO TRUST APPLICATIONS AND WORKLOADS SMEMILITARY FRIENDLY & PREFERRED - HOH SPONSOrZermount Inc. is seeking a Zero Trust (ZT) Applications and Workloads SME to assist in providing security to one of our federal clients. The ZT Applications and Workloads SME will be part of the implementation of ZT principles across the pillars...


  • Arlington, United States D.R. Horton Full time

    D.R. Horton, Inc., the largest homebuilder in the U.S., was founded in 1978 and is a publicly traded company on the New York Stock Exchange. It is engaged in the construction and sale of high quality homes designed principally for the entry-level and first time move-up markets. The Company also provides mortgage financing and title services for homebuyers...

  • Auditor 3

    4 weeks ago


    Arlington, United States State of Tennessee Full time

    **Location**: Shelby County **Last Day to Apply**: Jun 10, 2024 **Business Unit**: Fiscal Services / Audit **Job Family**: DIDD **Job Opening ID**: 58264 **Job Information** **State of Tennessee Job Information**: - Opening Date/Time - 05/28/2024 12:00AM Central Time - Closing Date/Time - 06/10/2024 11:59PM Central Time - Salary (Monthly) - $4,450 -...

  • supervisory auditor

    2 months ago


    Pentagon, Arlington, United States Department Of Defense Full time

    Summary This position is being filled under DoD Modified Direct Hire Authority, Section 1109; PL, 116-92, dated 12/20/2019.This position is part of the Organization of the Joint Chiefs of Staff, Office of the Comptroller. The incumbent serves as a senior auditor responsible for developing, coordinating, and promulgating auditing, business controls and...


  • Arlington, United States Andrews & Cole, LLC Full time

    RESPONSIBILITIES: The Corporate Audit Services’ Senior Auditor executes financial, operational and compliance audits, and supports department strategy and special projects under direction of department management. Ability to effectively execute risk-based audit engagements. Ability to devise and execute financial, operational and compliance audit...

  • Supervisory Auditor

    4 weeks ago


    Arlington, United States US Organization of the Joint Chiefs of Staff Full time

    **Duties**: **This position is being filled under DoD Modified Direct Hire Authority, Section 1109; PL, 116-92, dated 12/20/2019.** As a SUPERVISORY AUDITOR (FINANCIAL) at the GS-0511-15 some of your typical work assignments may include: - Serve as Branch chief for various financial management specialists to include accounting, auditing, risk management...

  • Premium Auditor

    2 weeks ago


    Arlington Heights, United States Afirm Solutions Full time

    Job DescriptionJob DescriptionEntrepreneurs Wanted!  Are you tired of working for someone else?  Have you thought about building a business for yourself?  If you answered yes to either question – Welcome!  We are excited to introduce Afirm to you!  Our field auditors come from all walks of life and various backgrounds.  They are inquisitive, driven...


  • Arlington, United States Base One Technologies Full time

    Senior Security Architect Required Education/ExperienceRequires a Bachelor's Degree and at least 12 years of prior relevant experience or Master's Degree and 8 years of prior relevant experience. Primary ResponsibilitiesOur Govt client has an immediate need for a Senior Security Architect for a new customer on a highly-visible and strategic Cybersecurity...


  • Arlington, Virginia, United States Amazon Full time

    Amazon is seeking a Senior Internal Auditor to join our Amazon Web Services (AWS) audit team. This is a high visibility opportunity to make important improvements throughout our Cloud Computing business. Our primary mission is to perform independent and objective assessments of business activities and related controls with the goal of improving operations...


  • Arlington, United States Two Six Technologies Full time

    Two Six Technologies is seeking a Senior Research Manager - Trusted AI to win and manage projects in the field of trustworthy AI systems. We are seeking candidates with experience working with and managing researchers in a government contracting setting, as well as experience in writing and winning proposals in this space. Ideal candidates will have a...


  • Arlington, United States Two Six Technologies Full time

    Two Six Technologies is seeking a Senior Research Manager - Trusted AI to win and manage projects in the field of trustworthy AI systems. We are seeking candidates with experience working with and managing researchers in a government contracting setting, as well as experience in writing and winning proposals in this space. Ideal candidates will have a...


  • Arlington, United States Two Six Technologies Full time

    Two Six Technologies is seeking a Senior Research Manager - Trusted AI to win and manage projects in the field of trustworthy AI systems. We are seeking candidates with experience working with and managing researchers in a government contracting setting, as well as experience in writing and winning proposals in this space. Ideal candidates will have a...


  • Arlington, United States Two Six Technologies Full time

    Two Six Technologies is seeking a Senior Research Manager - Trusted AI to win and manage projects in the field of trustworthy AI systems. We are seeking candidates with experience working with and managing researchers in a government contracting setting, as well as experience in writing and winning proposals in this space. Ideal candidates will have a...