IT Business Process Audit Subject Matter Expert - Clearance Required

Overview

Seeking an IT Business Process Audit SME with IT General Controls (ITGC) and IT Application Controls (ITAC) familiarity, to support the maintenance and conversion of the Army Enterprise Systems Integration Program (AESIP) Hub and related ERP modernization efforts. Principle responsibilities include serving as the financial statement audit readiness SME; coordinating formal and informal audit related tasker completion; developing and implementing corrective action plans (CAPs); and supporting other audit related reviews of U.S. Army financial systems. Work location is client site, Fort Belvoir, VA.

Note : Telework will be acceptable with the requirement to visit client offices at Fort Belvoir, Virginia at least once per week.

Responsibilities

• Lead audit analysis projects, staying abreast of current efforts, sending reminders to ensure suspense dates are met, and advising government leadership of emerging issues so they can be resolved quickly.
• Apply knowledge of federal and industry related policies, standards, and requirements, to determine the applicability of them to system documentation, controls, and risk management framework (RMF) overlay.
• Develop, coordinate, and execute Federal Information System Controls Audit Manual (FISCAM) control Test of Design / Test of Effectiveness for the system as it is being developed and moves through each stage of the build process.
• Review Service Organization Controls (SOC) 1 reports as they apply to internal controls over financial reporting (ICOFR) and determine related customer control requirements.
• Develop IT General Control descriptions and related business process control descriptions for system as it is being built.
• Develop and or review key IT audit artifacts such as the Account Management Plan, Incident Response Plan, System Security Plan, etc.
• Coordinate with RMF team lead to ensure security documents can be leveraged for financial statement audit purposes.
• Support ongoing governance of enterprise Governance Risk and Compliance (GRC) implementation efforts within systems, utilizing knowledge of GRC tools and best practices by reviewing Critical Action (CA) and Segregation of Duty (SOD) Reports.
• Identify where audit readiness requirements can be incorporated into the organization's policies, processes and procedures that support all FISCAM controls.
• Coordinates with the Product / System teams to integrate remediation of audit Notice of Findings and Recommendations (NFRs) with other identified system findings and associate with the RMF, the Enterprise Mission Assurance Support Service (eMASS), and other risk management tools when appropriate for fully integrated solutions.
• Apply analytical expertise to assist with the ongoing financial compliance of business system IT controls and regulations mandated by the U.S. Army and other federal agencies.
• Assist in the coordination to support requests from Independent Public Accountant (IPA) audit firm(s) related to the Provided by Client (PBC) lists, the Meeting Request Lists (MRLs), sample requests, and questions across the General Fund (GF) and Army Working Capital Fund (AWCF) audits.
• Upload artifacts to the Army Financial Audit Collaborative Tool (A-FACT), taking notes at meetings, ensuring work products are stored to the team's shared spaces, and similar hands-on efforts.
• Develop status reports and provide audit related meeting coordination support to EBS-C programs when requested.
• Assist in evaluating issues lists and draft NFRs.
• Manage the development and implementation of Corrective Action Plans (CAPs) and Plan of Action and Milestones (POA&M) from inception to closure to include updates to senior leaders.
• Assist government lead and team in tracking the remediation of NFRs and POA&Ms identified for business process and IT general controls in Army logistics IT systems by IPA audit firm(s).
• Coordinate to document and share lessons learned across programs.

Qualifications

Required :

Desired :