Summary IT Audit Specialists conduct independent assessments of Agency IT policy, programs, and operations, in accordance with NGA Office of Inspector General (OIG) guidance, Government Auditing Standards, and other applicable requirements. They may oversee contractors performing Federal Information Security Modernization Act of 2014 (FISMA) assessments. They gather and analyze IT information to determine Responsibilities ADDITIONAL INFORMATION: Assignment Description: Information Technology (IT) Audit Specialists conduct performance audits to provide independent assessments of Agency IT related policy, programs, and operations. They gather and analyze information, identify areas for improvement, draft findings and recommendations, and prepare reports in accordance with Government Auditing Standards. They follow up on report recommendations to ensure that appropriate corrective actions are identified and implemented. Duties: 1. Assess audit findings against applicable criteria to validate and review reports; review conclusions and recommendations before supervisory approval 2. Manage audit execution timelines 3. Integrate critical analysis, to conduct audit assignments; apply auditing principles to achieve outcomes The NGA OIG Audit Division conducts independent, objective audits of NGA programs and operations and makes recommendations to improve the efficiency and effectiveness of NGA policies, programs, and operations. The OIG Audit Division is seeking an IT Audit Specialist to research, plan, and conduct performance audits in accordance with Generally Accepted Government Auditing Standards with minimal supervision. This individual may assist in overseeing contractors performing FISMA evaluations. This individual will have an opportunity to participate in all aspects of the audit cycle from development of an annual audit plan through follow-up on recommendations. This position is non-supervisory. OIG will leverage in-person presence, maxi-flex, ad hoc telework, leave; as appropriate. In-Person presence is essential to community, sense of belonging, enhances communication, collaboration and coordination, as well as employee engagement. Ad hoc telework can add value to the OIG work posture when used appropriately; and is fully accountable and outcome based. Routine telework is not approved as part of the normal OIG work posture. There may be extenuating circumstances to normal conditions; these exceptions will be address on a case-by case basis. NGA Employees: Thank you for your interest in the OIG. In order to maintain its objectivity and independence, the OIG fills vacancies through AON and internal promotions and assignments. NGA employees are eligible to apply for OIG vacancies that are advertised via AON. If selected through the AON process, an NGA employee joining the OIG becomes part of the Inspector General Career Service (IGCS). Additional Application Requirement: You may be asked to complete one or more assessments in addition to the application you submit on this website as part of your application to NGA. These assessments may include but are not limited to: 1) Online questionnaires or assessments that require you to describe your job-related knowledge, skills, abilities, or other characteristics that are aligned with the mandatory and desirable qualifications of this job posting. The information you provide in the application you submit must support the response you provide to this questionnaire. You will receive an email to describe any additional assessments required. Please monitor your emails and complete any required assessments as soon as possible. This position may be eligible for a RECRUITMENT INCENTIVE: selected candidates may be offered an incentive as part of the offer of employment. To receive the incentive, selected candidates must be eligible under 5 CFR Part 575, Subpart A, upon issuance of the Final Offer Letter. Changes in federal employment status prior to issuance of the Final Offer Letter may affect eligibility. To receive the incentive, selected candidates will be required to sign a service agreement to stay within the position at NGA for the agreed upon time. If the service agreement is terminated before its completion, the employee may be required to repay a pro rata share amount of the incentive to the government. Additional information regarding recruitment incentives for current federal employees can be found in DoDI 1400.25, Volume 2006. Requirements Conditions of Employment Security Investigation SPECIAL INFO: As a condition of employment at NGA, persons being considered for employment must meet NGA fitness for employment standards. - U.S. Citizenship Required - Security Clearance (Top Secret/Sensitive Compartmented Information) - Polygraph Test Required - Position Subject to Drug Testing - Two Year Probationary Period - Direct Deposit Required SPECIAL REQUIREMENTS: You must be able to obtain and retain a Top Secret security clearance with access to Sensitive Compartmented Information. In addition, you are subject to a Counterintelligence Polygraph examination in order to maintain access to Top Secret information. All employees are subject to a periodic examination on a random basis in order to determine continued eligibility. Refusal to take the examination may result in denial of access to Top Secret information, SAP, and/or unescorted access to SCIFs. Employees with SCI access and who are under NGA cognizance are required to submit a Security Financial Disclosure Report, SF-714, on an annual basis in order to determine continued eligibility. Failure to comply may negatively impact continued access to Top Secret information, Information Systems, SAP, and/or unescorted access to SCIFs. NGA utilizes all processes and procedures of the Defense Civilian Intelligence Personnel System (DCIPS). Non-executive NGA employees are assigned to five distinct pay bands based on the type and scope of work performed. The employee's base salary is established within their assigned pay band based on their unique qualifications. A performance pay process is conducted each year to determine a potential base pay salary increase and/or bonus. An employee's annual performance evaluation is a key factor in the performance pay process. Employees on term or temporary appointments are not eligible to apply for internal assignment opportunity notices. This position is a DCIPS position in the Excepted Service under 10 U.S.C. 1601. DoD Components with DCIPS positions apply Veterans' Preference to preference eligible candidates as defined by Section 2108 of Title 5 USC, in accordance with the procedures provided in DoD Instruction 1400.25, Volume 2005, DCIPS Employment and Placement. If you are an external applicant claiming veterans' preference, as defined by Section 2108 of Title 5 U.S.C., you must self-identify your eligibility. Qualifications MANDATORY QUALIFICATION CRITERIA: For this particular job, applicants must meet all competencies reflected under the Mandatory Qualification Criteria to include education (if required). Online resumes must demonstrate qualification by providing specific examples and associated results, in response to the announcement's mandatory criteria specified in this vacancy announcement: 1. Demonstrated experience with performance audit experience in accordance with Generally Accepted Government Auditing Standards. 2. Demonstrated experience communicating auditing findings and recommendations to management verbally and in writing. 3. Demonstrated experience working effectively, both independently and on a team. EDUCATION REQUIREMENT: A. Education: Bachelor's degree from an accredited college or university in Computer Science, Information Assurance, Information Security, Information Systems, Cybersecurity, or an IT related field. -OR- B. Combination of Education and Experience: A minimum of 24 semester (36 quarter) hours of coursework in any area listed in option A, plus experience analyzing management information requirements and system specifications, evaluating management procedures and methodology, assessing the effectiveness of system controls, or a related area that demonstrates the ability to successfully perform the duties associated with this work. As a rule, every 30 semester (45 quarter) hours of coursework is equivalent to one year of experience. Candidates should show that their combination of education and experience totals to 4 years. -OR- C. Experience: A minimum of 4 years of experience analyzing management information requirements and system specifications, evaluating management procedures and methodology, assessing the effectiveness of system controls, or a related area that demonstrates the ability to successfully perform the duties associated with this work. DESIRABLE QUALIFICATION CRITERIA: In addition to the mandatory qualifications, experience in the following is desired: 1. Demonstrated experience as a Project Lead, Team Lead, or Auditor-in-Charge. 2. Ability to move seamlessly from one project to another and respond well to shifting priorities. 3. Maintaining Certified Information Systems Auditor or Certified Information System Security Professional certifications. Education Additional Information