IT Audit Manager

Assurit Consulting Group; National (WA); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical/dental coverage

Paid time off

Competitive compensation

Job summary

Assurit is seeking an experienced IT Audit Manager to support the Department of the Air Force (DAF) and lead the IT Audit Remediation function. You will own remediation plans, drive control owners to closure, and provide executive-level reporting across remediation lifecycle.

The role requires senior leadership across control owners, auditors, and system teams with a focus on governance, risk minimization, and timely escalation of issues. Hybrid on-site presence with Arlington, VA area.

Qualifications

• DAF IT Audit/Remediation experience required.
• 10+ years of relevant experience.
• Certifications: CISA, CISSP, CPA, CIA or similar.

Responsibilities

• Drive closure of planned DAF IT NFRs for the current Fiscal Year.
• Oversee CAP development coaching and NFR closure validation.
• Own SOPs for Audit Liaison, A-123 support, NFR remediation, CAP tracking, and third-party oversight.
• Direct AFAA controls testing metrics and reporting.
• Manage FIAR scoping forms and ICOFR system lists.
• Oversee data quality and interface control testing.

Skills

IT Audit

Remediation Leadership

Stakeholder Management

Communication

Risk Management

NIST/FISCAM knowledge

Education

Bachelor’s degree in information systems / related

Tools

SAP

Oracle Federal Financials

Job description

Assurit is currently seeking an experienced IT Audit Manager to support one of our clients.

About the Role:

Assurit is seeking an experienced IT Audit Manager to support the Department of the Air Force (DAF). We are seeking a Manager to lead the IT Audit Remediation function, directing the strategy and execution of remediation activities addressing audit findings and control gaps across IT systems and processes. This leader will own remediation plans, drive control owners and stakeholders to closure, and validate that implemented controls are designed and operating effectively. As the primary escalation point for the client, they will deliver executive-level reporting, surface risks early, drive prioritization decisions, and ensure strong governance across the remediation lifecycle.

A leader who independently owns multiple remediation workstreams, manages competing priorities, and proactively manages upward—bringing leadership risks, recommendations, and decisions, not just status updates. Comfortable as the senior coordination point across control owners, auditors, and system teams with minimal oversight.

Location: Local to NCR – ability to support the on-site Joint Base Andrews (JBA) requirement 1-2 times a week. Hybrid – Remote, Joint Base Andrews, Contractor Facility in Arlington, VA.

Start Date: ASAP

Responsibilities:

• Driving closure of planned DAF IT NFRs for the current Fiscal Year
• Overseeing CAP development coaching and NFR closure validation
• Owning SOPs for Audit Liaison, A-123 support, NFR remediation, CAP tracking, and third-party oversight
• Directing AFAA controls testing metrics and reporting
• Managing FIAR scoping forms and ICOFR system lists
• Overseeing data quality and interface control testing
• Leading annual FISCAM, FFMIA, and CUEC assessments
• Tracking self-identified deficiencies and validating compensating controls
• Facilitating FM overlay guidance aligned to DAF’s RMF
• Perform quality assurance reviews of IT deliverables, remediation deliverables, and work products.
• Responsibility for quality control, review and approval of working papers and findings and adherence to applicable standards, laws, policy, and regulations.
• Lead teams for complex workstreams involving IT audit remediation, FISCAM, cybersecurity, financial reporting, accounting, audit remediation, and/or internal controls.

Required Qualifications:

• DAF or other DOW Agency IT Audit/Remediation Support experience
• Proven experience leading audit remediation or compliance efforts, including managing staff/workstreams
• Strong knowledge of FISCAM, NIST, and FFMIA as applied to IT general controls and financial systems
• Experience building remediation plans (root cause, corrective actions, ownership, timelines) and validating control design/effectiveness
• Experience managing senior stakeholder relationships across IT, security, finance, and external audit
• Command of IT control domains: access, change, and configuration management, segregation of duties, interface controls, system operations
• Experience preparing/presenting reporting to leadership, auditors, and governance forums
• Skilled at identifying and escalating remediation risks and dependencies
• Experience supporting external audits, including control testing methodologies and auditor coordination
• Excellent communication skills, able to translate technical issues into business/compliance impact for executives
• Minimum 10 years of relevant professional experience.
• Bachelor’s degree in information systems management, computer science, accounting, business management, or other relevant field. Four years of relevant experience may substitute for a bachelor’s degree for candidates qualifying under the Accounting Level IV labor category.
• Relevant professional certification: CISA, CISSP, IAT II, CPA, CIA, CDFM, CGFM, or similar IT professional certification, as applicable to the qualifying labor category.
• Experience supporting systems consolidation/migration, modernization, ERP implementation, IT system audit remediation, IT audit reviews, IT system control documentation, and/or FISCAM and Risk Management Framework (RMF) implementation and sustainment for federal or state agencies or large, complex companies (greater than 1,000 employees).
• Demonstrated experience in SAP, Oracle Federal Financials, or other relevant financial systems environments, as applicable to the qualifying labor category.
• Experience leading financial management services and related projects, performing financial statement audits in DoD, federal agencies, or commercial Fortune 400 organizations, and/or preparing assertions packages, as applicable to the qualifying labor category.

Preferred Qualifications:

• Experience with/auditing SailPoint, CyberArk, AWS, Azure, Splunk
• Familiarity with DAF/DOW business process architecture (e.g., BEA Framework)
• Experience leading large, complex engagements
• SSAE No. 18 audit or assessment experience
• Audit readiness preparation IAW FIAR Guidance
• GAAP / GAGAS / ICOFR experience
• OMB Circulars A-123, A-127, A-134, A-136 and other OMB policies and federal financial management system requirements
• FISCAM experience and requirements
• FASAB, SSAC, and SFFAS experience
• Oracle Federal Financials functionality
• Current trends in information technology and/or cybersecurity
• Air Force policies, systems and procedures for financial management, personnel, acquisition, inventory, property and material management
• Familiarity with the Operational AF Financial Data Structure and Operational AF data Dictionary
• Proven ability to interact and communicate effectively with auditors, specifically the IG Community and/or the GAO

Assurit is an award winning, certified small business headquartered in Fairfax, VA. We offer a highly competitive compensation and benefits package inclusive of medical and dental coverage, as well as paid time off.

Founded in 2013, Assurit has become a trusted provider of cybersecurity expertise to customers across federal, state and local governments, as well as the commercial sector. We are an employee-centric organization that focuses on the growth and development of our greatest asset – our people. We believe that if our Team is trained and educated, we will always be able to deliver our promise of customer success. If you enjoy work environments focused on continuous learning and growth, Assurit will be a great fit for you.

Assurit is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.