HUD - Audit Specialist at cFocus Software Incorporated – Washington, District of Columbia

cFocus Software seeks an Audit Specialist to join our program supporting Housing and Urban Development (HUD). This position is remote. This position requires a Public Trust clearance.
Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, or related field.
• 7+ years of experience in IT audit, cybersecurity compliance, or risk management.
• Experience supporting FISMA audits and federal compliance frameworks.
• Strong knowledge of NIST SP 800-53 and federal audit requirements.
• Experience with audit evidence collection, POA&M management, and audit response coordination.

Duties:

• Support up to six (6) independent IT audits annually, including FISMA and financial system audits.
• Assist in evaluating IT systems, controls, policies, and procedures to ensure compliance with federal cybersecurity standards.
• Conduct pre-audit assessments, internal reviews, and mock audits to evaluate readiness.
• Collect, compile, and organize audit artifacts (policies, procedures, configurations, logs, reports, etc.).
• Track audit requests (PBCs) in automated systems (e.g., ServiceNow, eCase) and ensure timely responses.
• Coordinate with technical teams to gather evidence and respond to auditor requests.
• Maintain centralized repository of audit artifacts for reuse in future audits.
• Support audit engagements, meetings, interviews, and walkthroughs; document meeting minutes weekly.
• Develop and maintain audit plans, including timelines, objectives, and stakeholder coordination.
• Serve as liaison between auditors and internal stakeholders.
• Document and track Notices of Findings and Recommendations (NFRs).
• Develop and maintain Plans of Action and Milestones (POA&Ms) to address audit findings.
• Track remediation activities through completion and verify effectiveness of corrective actions.
• Produce weekly audit reports/dashboards and monthly NFR status reports.
• Ensure alignment with NIST SP 800-53 and federal compliance frameworks.
• Conduct annual reviews and updates of audit evidence and documentation.