Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Office of Audit Services (OAS) Cybersecurity and Information Technology Audit Division (CITAD)

Graphic of a digital padlock

OAS is a part of the HHS Office of Inspector General (OIG). We employ approximately 600 professional auditors in over 37 cities nationwide. We are responsible for the financial integrity of more than 500 departmental programs with expenditures in excess of $1 trillion.

CITAD is a group of IT specialist and specialized auditors within OAS focused on providing timely, impactful, and innovative IT audits of data and information systems maintained by or on behalf of HHS. CITAD is on the front lines of addressing two of OIG's core program integrity principles—prevention and detection of HHS cyberthreats. CITAD's cybersecurity work identifies and makes HHS aware of risk and vulnerabilities while enabling HHS to enhance its security posture.

CITAD is comprised of skilled problem solvers with deep technical knowledge in both cybersecurity and auditing principles. Our specific areas of expertise include:

  • Penetration testing
  • IT risk assessments
  • Contingency planning and disaster recovery
  • System development methodologies
  • Vulnerability scanning tools
  • Cloud computing
  • Technical written and oral communications
  • National Institutes of Standards and Technology (NIST) Guidance

As an information technology (IT) or cybersecurity auditor in the Cybersecurity and Information Technology Audit Division (CITAD) for the Office of Inspector General, you can help improve and protect critical information systems maintained by, or on behalf of, the U.S. Department of Health & Human Services (HHS).

Your work may be relied upon to conduct IT and cybersecurity audits of the Department's programs, operations, grantees, and contractors to identify system and program weaknesses; advise the Secretary and Congress about problems and deficiencies; and recommend improvements in cybersecurity and IT operations.

In addition to having a significant financial impact, Office of Audit Services (OAS):

  • Improves program performance, and internal controls
  • Affects legislative changes and regulations
  • Deters fraud, waste, and abuse
  • Enhances awareness around critical issues such as: opioid abuse, drug pricing, abuses in home health and hospice care and fraudulent activity within Medicare and Medicaid programs.
  • See the Cybersecurity Featured Topic

OAS provides a balance between professional and personal life. In addition to paying competitive salaries, we offer excellent benefits:

  • Flexible work hours
  • Family-friendly work environment
  • Work-at-home option (available on a limited basis)
  • Subsidy for use of public transportation
  • Travel opportunities
  • Training opportunities
  • 10 paid holidays each year
  • 13 sick leave days each year
  • 13 days of annual (vacation) leave each year during the first 3 years, 20 days each year for the next 12 years, and 26 days each year thereafter
  • Federal Employee Health Benefits Program
  • Optional life insurance
  • Federal Employees Retirement System
  • Optional tax-deferred Thrift Savings Plan, with up to 5% agency matching (similar to 401k)
  • Locality pay by geographic area
  • Periodic salary increases
  • Potential cash awards for superior accomplishments

The application process is easy. Visit the OIG/HHS Career Opportunities page at career and complete the following steps:

  • Click on the USA Jobs ( link to view available OIG vacancies.
  • Sign in as a new user, complete (upload) your resume, and respond to personal/eligibility questions.
  • Locate a vacancy you are interested in and respond to the position-specific questions.

You should receive an online confirmation regarding the receipt of your application and, later, the results of the rating process.

  • Washington, DC
  • Baltimore, MD
  • Boston, MA
  • Trenton, NJ
  • Philadelphia, PA
  • Atlanta, GA
  • Dallas, TX
  • Little Rock, AR
  • Seattle, WA