IT Systems Auditor

Amyx, Inc.•,

7d•$100,000 - $140,000•Onsite

About The Position

Amyx is seeking an IT Systems Auditor to support the Defense Logistics Agency (DLA) AMPS Legacy contract by assessing, analyzing, and improving segregation of duties (SoD), access controls, and governance processes across enterprise applications and information systems. This position works closely with application owners, auditors, cybersecurity personnel, access governance teams, and government stakeholders to identify access-related risks, evaluate control effectiveness, and ensure compliance with federal and Department of Defense requirements. The role supports audit readiness activities, access control reviews, SoD assessments, and remediation efforts designed to strengthen enterprise governance and reduce operational risk. The successful candidate will possess strong analytical, auditing, and documentation skills with the ability to evaluate complex business processes, financial systems, and access control structures while developing practical and compliant solutions.

Requirements

Must possess or be able to obtain an IT-II Non-Critical Sensitive (Tier 3/T3) determination prior to onboarding.
Must possess DoD 8140 IAT Level II Certification (e.g., Security+ CE)
Bachelor's degree in Accounting, Information Systems, Business, Cybersecurity, Information Technology, or a related discipline.
Certified Public Accountant (CPA) in good standing.
4+ years of financial, business, information systems audit, or related experience, including at least 1 year of government experience.
Experience performing information systems audits, controls assessments, compliance reviews, or risk evaluations.
Experience evaluating access controls, segregation of duties (SoD), and enterprise governance processes.
Understanding of system development life cycle phases, requirements documentation, and system design documentation.
Knowledge of Federal Financial Management Improvement Act (FFMIA) requirements and their application to financial systems.
Knowledge of Federal Information Systems Controls Audit Manual (FISCAM), GAO audit guidance, and applicable federal audit standards.
Familiarity with OMB Circulars A-123, A-127, and A-134.
Familiarity with Federal Acquisition Regulations
Experience supporting SAP and/or non-SAP enterprise application environments.
Experience supporting DoD, DLA, or other federal government customers.
Proficiency with Microsoft Office Suite, including Excel, Word, PowerPoint, and Project.
Strong analytical, problem-solving, written, and verbal communication skills.

Nice To Haves

Experience performing enterprise Segregation of Duties (SoD) analysis and remediation activities.
Experience supporting Identity and Access Management (IAM), Identity Governance, or Access Governance programs.
Experience evaluating role-based access models, entitlement structures, and privileged access controls.
Experience supporting federal financial systems, audit readiness initiatives, or internal control programs.
Experience developing audit workpapers, risk assessments, corrective action plans, and executive-level reports.
Experience supporting annual financial statement audits, compliance reviews, or Inspector General assessments.
Experience supporting the Defense Logistics Agency (DLA) or enterprise logistics and financial management systems.
Familiarity with RMF, cybersecurity compliance requirements, and access control assessment methodologies.
Experience collaborating with application owners, auditors, and technical teams to implement corrective actions.
Relevant certifications such as CISA, CGFM, CIA, CISM, CISSP, or related audit, governance, and cybersecurity certifications.

Responsibilities

Conduct segregation of duties (SoD), access control, and enterprise governance assessments across applications and systems.
Evaluate system access models, user entitlements, privileged access, and approval workflows to identify control weaknesses and compliance risks.
Support internal and external audit activities through analysis, documentation, testing, and remediation support.
Analyze financial, business, and operational processes to evaluate compliance with Federal and DoD requirements.
Review application access configurations, role definitions, and security controls for compliance with established policies and standards.
Develop findings, risk assessments, recommendations, and corrective action plans supporting audit and compliance objectives.
Collaborate with application owners, cybersecurity personnel, and governance teams to address identified access and control deficiencies.
Support enterprise role reviews, access certifications, and user entitlement analysis activities.
Develop audit workpapers, reports, presentations, and compliance documentation for government stakeholders.
Support AMPS governance initiatives, audit readiness efforts, and ongoing process improvement activities.
Must have the ability to communicate accurate information