Cherokee Nation - Washington, DC

posted 4 months ago

Full-time - Mid Level
Washington, DC
Executive, Legislative, and Other General Government Support

About the position

As a Senior Computer Specialist at Cherokee Nation Systems Solutions (CNSS) in Washington, DC, you will play a pivotal role in ensuring the security and functionality of system platforms. You will collaborate with upper management to determine acceptable levels of risk for enterprise computing platforms. Your responsibilities will include providing Information Technology General Controls (ITGC) testing to develop and execute software test plans aimed at identifying procedural issues related to software configurations that could result in financial risk. You will assist stakeholders in designing, implementing, and effectively operating IT controls and processes that protect financial data. Additionally, you will support in performing IT Benchmarking tasks, which are essential for demonstrating through testing that a sufficiently strong IT internal control environment for CFO Systems (both internal and external) is designed and operated effectively, ultimately leading to a downgrade of IT deficiencies. You will also assist in the development of a strategy that will enable the Benchmarks, taking into consideration the available resources within the organization. This role requires additional support to perform an initial A-123 ITGC assessment scoping each Fiscal Year (FY) based on the organization strategy. You will establish plans of action and milestones (POA&M) or Remediation Work Plans for all identified deficiencies within required timeframes per DHS 4300A and OCISO guidance. Conducting Tests of Design (TOD) and Tests of Effectiveness (TOE) for the IT program used for internal controls over Financial Systems will be a key part of your responsibilities. This includes evaluating the design and operating effectiveness of controls to ensure they meet the corresponding control requirements and objectives, as well as relevant standards and regulations such as NIST 800-53, Rev. 5 and DHS Sensitive Systems Policy Directive 4300A. In this role, you will provide support to ad hoc IT Assessments, including critical IT controls (CIC), Financial and related financial system ATOs, and Accounting Treatment Manual Assessment and Testing (ATM). Collaboration with cross-functional teams will be essential to integrate security requirements into system planning, fieldwork, and reporting. You will work under general supervision, relying on your experience and judgment to plan and accomplish goals while demonstrating a wide degree of creativity and latitude in problem-solving. Regular updates on security initiatives, risks, and mitigation strategies will be reported to a manager or head of a unit/department. Other job-related duties may be assigned as necessary.

Responsibilities

  • Provide Information Technology General Controls (ITGC) testing to develop and execute software test plans to identify procedural issues related to software configurations resulting in financial risk.
  • Assist stakeholders in designing, implementing, and effectively operating IT controls and processes that protect financial data.
  • Support in performing IT Benchmarking tasks to demonstrate a sufficiently strong IT internal control environment for CFO Systems.
  • Assist in the development of a strategy that will enable the Benchmarks in consideration of available resources within the organization.
  • Establish plans of action and milestones (POA&M) or Remediation Work Plans for all identified deficiencies within required timeframes per DHS 4300A and OCISO guidance.
  • Conduct Test of Design (TOD) for the IT program used for internal controls over Financial Systems.
  • Conduct Test of Effectiveness (TOE) for the IT program used for internal controls over Financial Systems.
  • Provide support to ad hoc IT Assessments including critical IT controls (CIC), Financial and related financial system ATOs, and Accounting Treatment Manual Assessment and Testing (ATM).
  • Collaborate with cross-functional teams to integrate security requirements into system planning, fieldwork, and reporting.
  • Work under general supervision, relying on experience and judgment to plan and accomplish goals.
  • Report to a manager or head of a unit/department, providing regular updates on security initiatives, risks, and mitigation strategies.

Requirements

  • Minimum education includes a bachelor's degree in a business field, systems engineering, computers, or other related fields.
  • Five (5) years progressive federal government experience in providing technical managerial and administrative direction as a project manager while holding certification.
  • Combination of Federal IT and auditing experience with a minimum of two (2) certifications in Information Technology technical areas such as CISA, CRISC, or similar certifications related to IT testing.
  • Minimum experience includes five (5) years of government IT financial system testing, including three (3) years of federal internal controls ITGC experience.

Nice-to-haves

  • Preferred knowledge of Federal and Department of Homeland Security (DHS) policies and guidance, OMB A-123 attachment R-4300A, DISA STIGS, DHS hardening guidance, DHS Control Evaluation Matrix (CEM) framework.
  • Familiarity with regulatory compliance requirements, such as NIST, FISMA, RMF tools.
  • Strong communication and interpersonal skills, with the ability to collaborate effectively with senior management, technical teams, and stakeholders.
  • Ability to lead and direct the work of others, providing mentorship and guidance to junior staff members.
  • Previous experience in a leadership role in IT security is highly desirable.

Benefits

  • Medical
  • Dental
  • Vision
  • 401K
  • Other possible benefits as provided. Benefits are subject to change with or without notice.
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service