IT Systems Auditor

Amyx, Inc.; Reston (VA); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

Medical, Dental, and Vision Plans

401(k) with matching contributions

Paid Time Off (PTO)

Holidays

Job summary

Amyx, Inc. is seeking an IT Systems Auditor to support the Defense Logistics Agency by assessing SoD, access controls, and governance processes across enterprise systems.

The role collaborates with application owners, auditors, cybersecurity personnel, and government stakeholders to identify access-related risks and ensure compliance with federal and DoD requirements. The candidate will develop audit workpapers, risk assessments, and remediation plans while supporting enterprise governance

Qualifications

• Bachelor's degree in a related field required.
• 4+ years of financial, business, information systems audit experience, including government experience.

Responsibilities

• Conduct SoD, access control, and governance assessments across applications and systems.
• Evaluate user entitlements, privileged access, and approval workflows for control weaknesses.
• Support audit activities through analysis, documentation, testing, and remediation.
• Analyze processes to ensure compliance with federal and DoD requirements.
• Review application access configurations, role definitions, and security controls.
• Develop findings, risk assessments, recommendations, and corrective action plans.

Education

Bachelor's degree in Accounting, Information Systems, Business, Cybersecurity, Information Technology, or a related discipline.

4+ years audit experience

Tools

SAP

Microsoft Office (Excel, Word, PowerPoint, Project)

Job description

IT Systems Auditor

Job Details

Job Locations: US

Category: Defense

Type: Full Time

Amyx is seeking an IT Systems Auditor to support the Defense Logistics Agency (DLA) AMPS Legacy contract by assessing, analyzing, and improving segregation of duties (SoD), access controls, and governance processes across enterprise applications and information systems.

This position works closely with application owners, auditors, cybersecurity personnel, access governance teams, and government stakeholders to identify access-related risks, evaluate control effectiveness, and ensure compliance with federal and Department of Defense requirements. The role supports audit readiness activities, access control reviews, SoD assessments, and remediation efforts designed to strengthen enterprise governance and reduce operational risk.

The successful candidate will possess strong analytical, auditing, and documentation skills with the ability to evaluate complex business processes, financial systems, and access control structures while developing practical and compliant solutions.

Responsibilities

• Conduct segregation of duties (SoD), access control, and enterprise governance assessments across applications and systems.
• Evaluate system access models, user entitlements, privileged access, and approval workflows to identify control weaknesses and compliance risks.
• Support internal and external audit activities through analysis, documentation, testing, and remediation support.
• Analyze financial, business, and operational processes to evaluate compliance with Federal and DoD requirements.
• Review application access configurations, role definitions, and security controls for compliance with established policies and standards.
• Develop findings, risk assessments, recommendations, and corrective action plans supporting audit and compliance objectives.
• Collaborate with application owners, cybersecurity personnel, and governance teams to address identified access and control deficiencies.
• Support enterprise role reviews, access certifications, and user entitlement analysis activities.
• Develop audit workpapers, reports, presentations, and compliance documentation for government stakeholders.
• Support AMPS governance initiatives, audit readiness efforts, and ongoing process improvement activities.
• Must have the ability to communicate accurate information.

Qualifications

• Sensitivity Level: Non-Critical Sensitive
• Must possess or be able to obtain an IT-II Non-Critical Sensitive (Tier 3/T3) determination prior to onboarding.
• Must possess DoD 8140 IAT Level II Certification (e.g., Security+ CE)
• Bachelor's degree in Accounting, Information Systems, Business, Cybersecurity, Information Technology, or a related discipline.
• Certified Public Accountant (CPA) in good standing.
• 4+ years of financial, business, information systems audit, or related experience, including at least 1 year of government experience.
• Experience performing information systems audits, controls assessments, compliance reviews, or risk evaluations.
• Experience evaluating access controls, segregation of duties (SoD), and enterprise governance processes.
• Understanding of system development life cycle phases, requirements documentation, and system design documentation.
• Knowledge of Federal Financial Management Improvement Act (FFMIA) requirements and their application to financial systems.
• Knowledge of Federal Information Systems Controls Audit Manual (FISCAM), GAO audit guidance, and applicable federal audit standards.
• Familiarity with OMB Circulars A-123, A-127, and A-134.
• Familiarity with Federal Acquisition Regulations
• Experience supporting SAP and/or non-SAP enterprise application environments.
• Experience supporting DoD, DLA, or other federal government customers.
• Proficiency with Microsoft Office Suite, including Excel, Word, PowerPoint, and Project.
• Strong analytical, problem-solving, written, and verbal communication skills.
• Experience performing enterprise Segregation of Duties (SoD) analysis and remediation activities.
• Experience supporting Identity and Access Management (IAM), Identity Governance, or Access Governance programs.
• Experience evaluating role-based access models, entitlement structures, and privileged access controls.
• Experience supporting federal financial systems, audit readiness initiatives, or internal control programs.
• Experience developing audit workpapers, risk assessments, corrective action plans, and executive-level reports.
• Experience supporting annual financial statement audits, compliance reviews, or Inspector General assessments.
• Experience supporting the Defense Logistics Agency (DLA) or enterprise logistics and financial management systems.
• Familiarity with RMF, cybersecurity compliance requirements, and access control assessment methodologies.
• Experience collaborating with application owners, auditors, and technical teams to implement corrective actions.
• Relevant certifications such as CISA, CGFM, CIA, CISM, CISSP, or related audit, governance, and cybersecurity certifications.

Benefits

• Medical, Dental, and Vision Plans (PPO & HSA options available)
• Flexible Spending Accounts (Health Care & Dependent Care FSA)
• Health Savings Account (HSA)
• 401(k) with matching contributions
• Roth
• Qualified Transportation Expense with matching contributions
• Short Term Disability
• Long Term Disability
• Life and Accidental Death & Dismemberment
• Basic & Voluntary Life Insurance
• Wellness Program
• PTO
• 11 Holidays
• Professional Development Reimbursement

Salary-100-140k

Physical Demands

Employee needs to be able to sit at a workstation for extended periods; use hand(s) to handle or feel objects, tools, or controls; reach with hands and arms; talk and hear. Most positions require ability to work on desktop or laptop computer for extended periods of time reading, reviewing/analyzing information, and providing recommendations, summaries and/or reports in written format. Must be able to effectively communicate with others verbally and in writing. Employee may be required to occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds. Regular and predictable attendance is essential.

Amyx is a VEVRAA federal contractor and we request priority referral of veterans.

Amyx is proud to be an Equal Opportunity Employer. All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law.