Power3 Solutions · 1 week ago
IT Systems Auditor
Power3 Solutions is partnering with federal, state, and local organizations to provide top talent for critical roles. They are seeking an IT Systems Auditor to support the Defense Logistics Agency (DLA) Procurement Integrated Enterprise Environment (PIEE) Program Management Office by conducting audits, monitoring compliance, and recommending improvements.
Business DevelopmentConsultingDigital MarketingGraphic DesignHuman ResourcesSocial Media MarketingWeb Design
Responsibilities
Experience with Federal accounting principles: how to apply them in various accounting systems and how data can be captured and analyzed in various environments
Demonstrated understanding of the Federal Financial Improvement Act (FFMIA) requirements and experience applying FFMIA requirements in assessment of financial systems. Understanding of systems development phases and related work products, including requirements and design documentation
Experience in planning, executing and reporting on information systems controls assessments and to provide support for reviewing/implementing the Management Internal Control Program (MICP)
Understanding of GAO, the Federal Information Systems Controls Audit Manual and Federal Audit Manual approaches, and ability to access information system controls in areas of Security Management, Access, Configuration Management, Segregation of Duties, and application Input, Output and Processing Controls
Demonstrated experience in evaluating controls within ERP systems
Experience in providing summary reports and working papers with detailed results and actionable recommendations
Experience in developing Controls descriptions, evidentiary materials validation and testing for SOC1 Type 2 audits
Communicates status of internal audits to the PM and PMO Functional Leads at Internal Review
Evaluate relevant internal controls associated with the administration and operations of the program
Identify, assess, analyze, and communicate all findings and observations
Develop strategies to address noted findings
Collaborate with PMO Subject Matter Experts (SME) to manage ITGC internal testing. To include, but not limited to Audit Logging, Access Controls, Configuration Management, and Segregation of Duties
Perform the annual risk assessment and prepare the Risk Assessment Report (RAR) on all PIEE Information Technology General Controls (ITGC) and application controls
Ensure the team maintains the list of all user entities with whom the PMO has an Audit Memo of Understanding (MOU) or Memo of Agreement (MOA)
Coordinate the collection, review, and submission of Evidential Materials (EM) in response to Provided By Client (PBC) requests
Review and assist the Government Lead in remediation of Potential Observations (PO)
Review deviations and/or Notice of Findings (NFR) with PMO SMEs and Government Team Lead to ensure that all deviations and/or NFRs are updated in the Office of the Under Secretary (OSD) NFR Database
Qualification
Required
Clearance required: NACLC (Secret clearance from another Agency should be transferable as well)
Experience with Federal accounting principles: how to apply them in various accounting systems and how data can be captured and analyzed in various environments
Demonstrated understanding of the Federal Financial Improvement Act (FFMIA) requirements and experience applying FFMIA requirements in assessment of financial systems
Understanding of systems development phases and related work products, including requirements and design documentation
Experience in planning, executing and reporting on information systems controls assessments and to provide support for reviewing/implementing the Management Internal Control Program (MICP)
Understanding of GAO, the Federal Information Systems Controls Audit Manual and Federal Audit Manual approaches, and ability to access information system controls in areas of Security Management, Access, Configuration Management, Segregation of Duties, and application Input, Output and Processing Controls
Demonstrated experience in evaluating controls within ERP systems
Experience in providing summary reports and working papers with detailed results and actionable recommendations
Experience in developing Controls descriptions, evidentiary materials validation and testing for SOC1 Type 2 audits
Communicates status of internal audits to the PM and PMO Functional Leads at Internal Review
Evaluate relevant internal controls associated with the administration and operations of the program
Identify, assess, analyze, and communicate all findings and observations
Develop strategies to address noted findings
Collaborate with PMO Subject Matter Experts (SME) to manage ITGC internal testing. To include, but not limited to Audit Logging, Access Controls, Configuration Management, and Segregation of Duties
Perform the annual risk assessment and prepare the Risk Assessment Report (RAR) on all PIEE Information Technology General Controls (ITGC) and application controls
Ensure the team maintains the list of all user entities with whom the PMO has an Audit Memo of Understanding (MOU) or Memo of Agreement (MOA)
Coordinate the collection, review, and submission of Evidential Materials (EM) in response to Provided By Client (PBC) requests
Review and assist the Government Lead in remediation of Potential Observations (PO)
Review deviations and/or Notice of Findings (NFR) with PMO SMEs and Government Team Lead to ensure that all deviations and/or NFRs are updated in the Office of the Under Secretary (OSD) NFR Database
Excellent analytical and writing skills
Familiarity with Federal Acquisition Regulations and the principles of being directly involved in the acquisition aspect
Knowledgeable in OMB Circulars A-123, Management's Responsibility for Internal Control; A-127, Financial Management Systems; A-134, Financial Accounting Principles and Standards; and the Federal Information Systems Controls Audit Manual requirements
Experience working with DoD/DLA is highly desired
Five (5) years of relevant C&A experience; Risk Management Framework (RMF)
Experience in assessing Information System General Controls (ITGC), security controls, and conducting authorization reviews for large, complex organizations
Knowledge and understanding of DOD security regulations, DISA STIGs
Bachelor's Degree in Computer Science, IT or related field
Preferred
Certified Information Systems Auditor (CISA)
Benefits
Health insurance
Retirement plans
Professional development support