Information Systems Audit Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as the senior advisor and main point of contact for DoD financial audit engagements, which include DHA MERHCF, DoD CIO ICOFR, FIAR, and SSAE.

• Provide essential material and personnel support during external audit examinations, delivering required digital artifacts and outcomes.

• Address PBC data requests from external auditors, such as OIG, GAO, OUSD(C), and other auditing organizations.

• Showcase system controls to auditors for DMDC applications and systems control objectives.

• Counsel leadership and Government stakeholders on NFRs and NOFs, offering recommendations for adjudication strategies.

• Sustain continuous audit readiness through assessments of internal controls, business process analysis, and risk identification across the DEERS application portfolio.

• Create and uphold a Compliance Audit Support Plan that aligns with FISCAM and FFMIA standards.

• Ensure the application of Financial Management overlays to NIST SP 800-53 Rev 5 controls, which includes ICAM onboarding requirements.

• Assist with OMB Circular A-123, FISCAM, and RMF audit activities.

• Collaborate with Product Managers and technical leads to pinpoint vulnerabilities and compliance violations that create audit exposure.

• Design, document, and implement audit-related internal processes, procedures, policies, and compliance frameworks.

• Establish an audit readiness methodology and maintain procedural documentation for FISCAM and FFMIA.

• Monitor audit deliverables, PBC responses, and milestones for corrective actions.

• Develop, implement, and oversee Corrective Action Plans through the identification, tracking, and verification of remediation efforts.

• Suggest enhancements to internal controls, accounting procedures, and financial statements.

• Track and report on CAP remediation progress and escalate any at-risk items.

• Coordinate technical and procedural corrective actions with security, development, and operations teams.

• Advise senior leadership and Government clients on information systems audits, financial audit readiness, and compliance with internal controls.

• Represent the program during external audits and Government reviews, including IPRs and MSRs.

• Integrate audit readiness into Agile/DevSecOps delivery and update stakeholders on audit posture, findings, remediation, and improvements to processes.

⛳️ Requirements

• A minimum of 12 years of experience with a BS/BA; at least 10 years with an MS/MA; a minimum of 7 years with a Ph.D.; or 16 years with a high school diploma.

• Progressive experience in information systems audits, financial audit readiness, or internal controls within DoD or Federal government settings.

• Extensive knowledge and practical experience with FIAR, FISCAM, FFMIA, OMB Circular A-123, and ICOFR frameworks and their implementation in DoD IT systems.

• Experience in supporting or leading external DoD financial audits involving OIG, GAO, OUSD(C), DHA, or similar auditing bodies.

• Proven experience in developing and maintaining Corrective Action Plans (CAPs) and managing the remediation of audit findings from identification to closure.

• Experience in responding to PBC data requests and preparing audit artifacts and system control demonstrations for external reviewers.

• Capability to develop and implement internal processes, procedures, and compliance frameworks to enhance program-wide audit readiness.

• Working knowledge of NIST SP 800-53 Rev 5, including Financial Management overlays, and understanding how IT general controls correspond to financial management objectives.

• Strong analytical, written, and verbal communication skills, with the ability to brief senior leadership and Government stakeholders effectively and succinctly.

• Ability to obtain Public Trust clearance.

• Preferred: active Public Trust clearance.

• Preferred: CPA, CISA, CGFM, or CGAP certification.

• Preferred: experience in supporting DHA MERHCF, DoD CIO ICOFR, or FIAR/SSAE audit engagements.

• Preferred: familiarity with DEERS, TRICARE, or other large-scale DoD healthcare/benefits financial systems.

• Preferred: ICAM onboarding experience related to FM overlay compliance.

• Preferred: knowledge of RMF and eMASS.

• Preferred: Agile/DevSecOps experience.

• Preferred: familiarity with CMMC.

• Preferred: working knowledge of ServiceNow, JIRA, and SharePoint.

🏝️ Benefits

• Potential eligibility for overtime.

• Potential eligibility for shift differential.

• Potential eligibility for a discretionary bonus.