Company Overview Brown & Company CPAs and Mgmt Consultants PLLC is a distinguished professional services firm specializing in accounting, auditing, and management consulting primarily for the Federal Government. With a strong reputation for excellence and integrity, we deliver comprehensive financial and IT reviews, audits, and compliance assessments to support our clients' success. Job Overview We are seeking a highly motivated SharePoint Auditor to join our dynamic team. In this vital role, you will lead the assessment and validation of SharePoint environments to ensure they meet rigorous security standards and compliance requirements. Your expertise will help safeguard sensitive information, optimize system performance, and uphold the highest levels of IT security and internal controls across enterprise SharePoint platforms. Responsibilities Conduct comprehensive audits of SharePoint environments to evaluate security controls, configurations, and compliance with standards such as

NIST SP 800-53, ISO 27001, ISO

27002, and FISMA. Perform security analysis on SharePoint architecture including permissions, access controls, encryption protocols, and data integrity measures. Assess adherence to IT governance frameworks like COBIT, ITIL, and RMF during SharePoint audits. Review IT controls related to identity & access management (IAM), incident response procedures, and disaster recovery plans specific to SharePoint systems. Utilize tools such as Splunk, Burp Suite, Nmap, and SIEM solutions to identify vulnerabilities and monitor system security. Document audit findings clearly and develop actionable recommendations for improving security posture and compliance. Collaborate with project teams on implementing remediation strategies aligned with cybersecurity frameworks like NIST Cybersecurity Framework and FedRAMP. Requirements Proven experience in IT infrastructure security analysis with a focus on enterprise collaboration platforms like SharePoint. Strong knowledge of network security concepts including LAN/WAN architecture, firewalls, IDS/IPS systems, VPNs, load balancing, DNS/DHCP services. Familiarity with regulatory standards such as

SOX, PCI DSS, FISMA, FIPS

cryptography standards, and internal control testing methodologies. Hands-on experience with vulnerability research tools like Nmap or Burp Suite; proficiency in scripting languages such as PowerShell or Python is a plus. Background in computer science or information technology with understanding of operating systems (Windows Server/Unix/Linux), cloud computing (AWS/Azure), and system administration. Project management experience in technology environments with knowledge of SDLC/DevOps practices is advantageous. Excellent data analytics skills combined with the ability to interpret complex audit data into clear reports. Strong communication skills for effective collaboration across technical teams and stakeholders. Join us to play a crucial role in strengthening our clients' cybersecurity defenses while advancing your career in a fast-paced environment dedicated to excellence!

Pay:

$98,880.32 - $119,081.67 per year

Benefits:

Flexible schedule

Work Location:

Hybrid remote in Greenbelt, MD 20770