Senior Analyst

Savantage Solutions•Rockville, MD

1d•$120,000 - $143,000

About The Position

Savantage Solutions is seeking a Senior Auditor to join our professional services team supporting a government agency’s financial management program. This individual contributor role is responsible for supporting audit compliance, control testing, and compliance activities across multiple regulatory and audit frameworks.

Requirements

Secret Clearance
8+ years of experience in Auditing or related field with at least 5 years within DoW
Strong analytical and problem-solving skills
Excellent communication and interpersonal skills

Nice To Haves

Experience working with DoW cloud-hosted financial systems
Experience developing and maintaining FISCAM and NIST control documentation, audit narratives, process flow diagrams, and audit evidence packages.
Working knowledge of the Government Accountability Office (GAO) Standards for Internal Control in the Federal Government (Green Book) and Office of Management and Budget (OMB) Circular A-123
CPA, CIA, CISA, CFE, CGAP, CDFM, or CGFM Certification

Responsibilities

Support the program's audit and internal control efforts across all applicable audit and compliance frameworks.
Ensure the system complies with FISCAM and NIST guidance for IT general controls, application controls, and financial reporting controls.
Collaborate with cybersecurity and IA teams to ensure IT general controls are addressed within Authority to Operate documentation and related remediation efforts.
Identify control gaps in system configurations, interfaces, and infrastructure, and maintain awareness of evolving regulatory requirements.
Coordinate audit walk-throughs and ensure program-specific input to auditors is accurate and complete.
Develop and maintain audit documentation, including corrective action plans, control narratives, process flow diagrams, and evidence packages.
Track audit-related change requests to ensure remediation is completed prior to corrective action deadlines.
Lead development and monitoring of corrective action plan milestones across applicable control domains, coordinating with technical and functional teams to ensure remediation produces verifiable evidence.
Facilitate progress reporting with government audit and program stakeholders, including status briefings and written updates.
Maintain control documentation and mappings (e.g., NIST SP 800-53, FISMA) to ensure consistency with the system's security and risk management documentation.
Review system interfaces and reporting outputs from an audit and control perspective to ensure data is properly controlled and supportable as audit evidence.
Provide regular audit and compliance status updates as part of program reporting (weekly, monthly, quarterly).