1

Cisa Cism Jobs (NOW HIRING)

CISSP, CISA, CISM, RSA. HIGHLY Desired Skills: 1) Healthcare Additional Information Please send your most updated resume to mfelix@quantixinc. com or feel free to reach me at 720-907-8997.

CISSP, CISA, CISM, RSA. HIGHLY Desired Skills: 1) Healthcare Additional Information If interested, please send your most updated resume to hreynolds @quantixinc.com

IA & SS - Master

Washington, DC · On-site

$82 - $91/hr

Required • CISSP, CISA, CISM or other relevant security certification(s). Required Flexible work from home options available. Compensation: $82.00 - $91.00 per hour About Us AHU Technologies INC is ...

IA & SS - Master

Washington, DC · On-site

$82 - $91/hr

Required • CISSP, CISA, CISM or other relevant security certification(s). Required Flexible work from home options available. Compensation: $82.00 - $91.00 per hour About Us AHU Technologies INC is ...

Multiple maintained industry certification such as CISSP, CISA, CISM, CRISC, CDPSE, CGEIT, CCSP, ISO 27001 Lead Auditor/Implementer. * Relevant work experience related to Cyber Security assessment.

Certification in information systems auditing (CISA, CISM, CISSP) or accounting designation (CPA) is desirable and Certified Internal Auditor (CIA) is considered an asset. * Excellent verbal and ...

next page

Showing results 1-20

Cisa Cism information

See salary details

$10

$50

$69

How much do cisa cism jobs pay per hour?

As of Jun 12, 2026, the average hourly pay for cisa cism in the United States is $50.19, according to ZipRecruiter salary data. Most workers in this role earn between $43.27 and $57.69 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a CISA/CISM professional, and why are they important?

To thrive as a CISA/CISM professional, you need a deep understanding of information systems auditing, risk management, cybersecurity frameworks, and compliance standards, typically validated by earning CISA or CISM certification. Proficiency in tools such as GRC (governance, risk, and compliance) platforms, vulnerability assessment software, and audit management systems is highly valued. Strong analytical thinking, attention to detail, and effective communication skills set outstanding professionals apart in this field. These capabilities are essential for ensuring organizational information security, regulatory compliance, and the ability to communicate risk effectively to stakeholders.

How do CISA and CISM professionals typically collaborate with other departments within an organization?

CISA and CISM professionals often work closely with IT, compliance, legal, and business operations teams to ensure robust information security and audit practices. They may participate in cross-functional meetings to assess risks, implement security controls, and respond to incidents. Collaboration is key for aligning security initiatives with organizational objectives, communicating audit findings, and ensuring that policies meet both regulatory requirements and business needs. This cooperative environment helps foster a culture of security and continuous improvement throughout the organization.

What is the difference between Cisa Cism vs Cisa Certified Information Systems Auditor?

AspectCisa
CertificationsRequires passing the CISA exam, focusing on auditing, control, and security of information systems
Work EnvironmentAuditing firms, consulting companies, internal audit departments
Industry UsageWidely used in IT audit, risk management, and compliance roles

The Cisa and Cism certifications are both valuable in information security, but Cisa emphasizes auditing and control of information systems, while Cism focuses on managing and overseeing enterprise information security programs. Professionals often pursue both for comprehensive expertise in IT security and audit roles.

What are CISA and CISM certifications?

CISA (Certified Information Systems Auditor) and CISM (Certified Information Security Manager) are globally recognized certifications offered by ISACA for IT professionals. CISA focuses on auditing, controlling, and assuring information systems, while CISM emphasizes managing and governing information security programs. Both certifications validate expertise and experience in their respective domains and are highly valued in the fields of IT audit, security, and risk management. Earning these credentials can enhance career prospects and demonstrate a commitment to best practices in IT governance and security.
More about Cisa Cism jobs
What states have the most Cisa Cism jobs? States with the most job openings for Cisa Cism jobs include:
Infographic showing various Cisa Cism job openings in the United States as of June 2026, with employment types broken down into 95% Full Time, 2% Part Time, and 3% Contract. Highlights an 78% Physical, 10% Hybrid, and 12% Remote job distribution, with an average salary of $104,397 per year, or $50.2 per hour.

Other

Posted 7 days ago


Job description

***W2 Only***

Required Education
• Option 1: Bachelor''s degree with 5+ years of experience in this capacity
• Option 2: No degree with a minimum of 7+ years of experience in this capacity
Required Certification
• CISSP, CISA, CISM, CRISC
Required Skills
• 5+ years in cyber risk, IT risk, or information security risk (consulting or Big 4 experience preferred)
• Strong communication and presentation skills with ability to engage senior leadership
• Ability to translate technical concepts into business risk language
• Experience managing risk registers and tracking remediation activities
• Technical understanding of systems, controls, and risk scenarios
• Proactive, organized, and able to anticipate stakeholder needs
• Experience contributing to risk program design or process improvement
Nice-to-Have Skills:
• Qualitative risk analysis methodologies in cybersecurity or IT environments
• FAIR (Factor Analysis of Information Risk)
• ISO 27001, NIST, or similar frameworks
• ServiceNow IRM or similar GRC platforms
Job Description
• Facilitate risk acceptance and awareness discussions with senior leadership; translate technical risks into business terms
• Develop executive-ready presentations and proactively anticipate leadership questions and data needs
• Maintain and track the cyber risk register, including follow-up on remediation actions and acceptance decisions
• Perform qualitative risk analysis (likelihood and impact) using scenario-based models
• Evaluate control effectiveness and compensating controls; provide risk-based recommendations
• Support and contribute to the design and improvement of the cyber risk management program and associated processes