IT Audit Remediation Manager

Diligent Solutions; Washington (District of Columbia); Híbrido; USD 110.000 - 160.000; Jornada completa

Descripción de la vacante

Diligent Solutions is seeking an IT Audit / Business Transformation professional to lead remediation activities across technology processes and systems. You will independently drive workstreams, surface risks to leadership, and coordinate with control owners, auditors, and system teams while requiring minimal day-to-day oversight.

The role focuses on developing remediation plans, tracking actions to completion, validating new controls, and maintaining governance throughout the remediation

Formación

• Active Secret clearance required.
• 5 years of experience in IT audit remediation or related field.
• CISA, cyber security (IAT II or CISSP), or similar certification required.
• 4 year degree or 4 years relevant experience.
• Experience leading remediation efforts for audit findings and control deficiencies.
• Knowledge of FISCAM, NIST, and FFMIA in IT general controls and financial systems.

Responsabilidades

• Track remediation of IT NFRs and closures for the current FY.
• Develop CAPs with stakeholders and validate actions to closure.
• Plan off-site NFR deep-dive workshops.
• Document MOUs between client and other audit support roles.
• Maintain SOPs for Audit Liaison activities and third-party oversight.
• Provide dashboards and reporting for governance forums.
• Identify remediation risks, dependencies, and delays and escalate as needed.
• Support external audits and coordinate with auditors.

Conocimientos

Remediation leadership

Cross-functional coordination

Audits / control testing

Documentation & reporting

Communication

Educación

B.S./B.A. in information systems management or computer science or related field

Herramientas

FISCAM

NIST

Audit tooling concepts

Descripción del empleo

About the Role:

We are seeking an IT Audit / Business Transformation professional as part of the IT Audit Remediation staff responsible for coordinating and driving the execution of remediation activities to address audit findings and control gaps across technology processes and systems. The ideal candidate can independently drive assigned workstreams, manage competing priorities, and proactively manage upward by surfacing risks, recommendations, and decision points to leadership. This individual should be comfortable coordinating across control owners, auditors, and system teams, while requiring limited day-to-day oversight.

This Role Will:

• Support the development of practical remediation plans
• Work with control owners and stakeholders to track actions to completion
• Validate that newly implemented controls are designed appropriately and operating effectively
• Prepare clear status updates for leadership and reporting purposes
• Highlight risks or delays
• Support issue prioritization and escalation
• Help maintain overall governance and documentation throughout the remediation lifecycle

Location: Remote (DC Metro Area Preferred)

Responsibilities:

• Tracking and supporting remediation of planned DAF IT Notices of Findings and Recommendations (NFR) closures for the current Fiscal Year (FY)
• Providing audit coaching to system teams to support the development of Corrective Action Plans (CAPs) and perform validation activities to support NFR closure and strengthen long-term control sustainment
• Planning and supporting off-site NFR system deep-dive workshops
• Documenting and managing memorandums of understanding (MOU) between the client and peer organizations roles and responsibilities across various audit support functions
• Developing and maintaining SOPs for Audit Liaison activities, A-123 support, NFR remediation, CAP tracking, and third-party service provider oversight
• Supporting metrics reporting and oversight for Air Force Audit Agency controls testing progress
• Managing FIAR system scoping forms and ICOFR system lists
• Assisting with data quality and interface control testing and validation
• Documenting and executing annual FISCAM, FFMIA, and CUEC assessments
• Tracking client self-identified deficiencies
• Documenting and validating compensating controls
• Supporting the development of the IT control rationalization playbook
• Supporting implementation playbooks for standardizing controls supported by enterprise capabilities
• Facilitating Financial Management (FM) overlay implementation guidance aligned to the DAF’s Risk Management Framework (RMF)

Required Qualifications:

• Active Secret clearance
• 5 years of experience
• CISA, cyber security (e.g., IAT II or CISSP), or similar IT professional certification required
• 4 year degree in information systems management, computer science, or other relevant field, or 4 years relevant experience
• Demonstrated experience leading remediation efforts for audit findings, control deficiencies, or compliance gaps
• Working knowledge of FISCAM, NIST, and FFMIA requirements and their application to IT general controls and financial system environments
• Experience developing detailed remediation plans, including root cause analysis, corrective actions, owners, and target completion dates
• Ability to assess and validate the design and operating effectiveness of newly implemented or enhanced controls
• Experience coordinating with cross-functional stakeholders, including IT, security, finance, and external audit
• Strong understanding of IT control domains such as access management, change management, configuration management, segregation of duties, interface controls, and system operations
• Experience preparing status updates, dashboards, and reporting materials for leadership, auditors, and governance forums
• Ability to identify remediation risks, dependencies, and delays, and escalated issues appropriately
• Experience supporting external audits and coordinating with auditors
• Knowledge of control testing methodologies, evidence requirements, and auditor expectations
• Strong verbal and written communication skills, including the ability to translate technical issues into business and compliance impacts

Preferred Qualifications:

• DAF or other DOW Agency Audit / Audit Remediation Support
• Experience working with and/or auditing technologies such as SailPoint, CyberArk, AWS, Azure, Splunk
• Familiarity with the DAF or DOW business process architecture (e.g., Business Enterprise Architecture (BEA) Framework)

Clearance:

• Active or Interim Secret Clearance Required