IT Systems Auditor

Amyx, Inc.; United States; On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

Medical, Dental, Vision plans

401(k) with matching contributions

PTO and holidays

Professional development reimbursement

Job summary

Amyx, Inc. is seeking an IT Systems Auditor to support the Defense Logistics Agency (DLA) AMPS Legacy contract by assessing SoD, access controls, and governance across enterprise applications and information systems.

This role collaborates with application owners, auditors, cybersecurity personnel, access governance teams, and government stakeholders to identify access-related risks, evaluate control effectiveness, and ensure compliance with federal and DoD requirements.

Qualifications

• Experience performing information systems audits, controls assessments, compliance reviews, or risk evaluations.
• Knowledge of FFMIA, FISCAM, GAO guidance, and federal audit standards.
• Familiarity with OMB Circulars A-123, A-127, A-134 and Federal regulations.
• Experience supporting DoD, DLA, or other federal government customers.

Responsibilities

• Conduct SoD, access control, and enterprise governance assessments across applications and systems.
• Evaluate system access models, entitlements, privileged access, and approval workflows.
• Support audit activities with analysis, documentation, testing, and remediation work.
• Analyze financial, business, and operational processes for compliance with Federal/DoD requirements.
• Review application access configurations, role definitions, and security controls for policy compliance.
• Develop findings, risk assessments, recommendations, and corrective action plans.
• Collaborate with owners, cybersecurity, and governance teams to address deficiencies.
• Support governance initiatives, audit readiness, and continuous process improvement.
• Develop audit workpapers, reports, and executive-level documentation for stakeholders.
• Communicate accurately and effectively with government stakeholders.

Skills

SoD analysis

Access controls

Governance processes

Audit readiness

Risk assessment

Analytical skills

Communication

Education

Bachelor's degree in Accounting/IS/IT

CPA in good standing

CISA / CISSP / CGFM

DoD/IAM/Governance familiarity

Tools

SAP experience

Microsoft Office Suite

Job description

Amyx is seeking an IT Systems Auditor to support the Defense Logistics Agency (DLA) AMPS Legacy contract by assessing, analyzing, and improving segregation of duties (SoD), access controls, and governance processes across enterprise applications and information systems.

This position works closely with application owners, auditors, cybersecurity personnel, access governance teams, and government stakeholders to identify access-related risks, evaluate control effectiveness, and ensure compliance with federal and Department of Defense requirements. The role supports audit readiness activities, access control reviews, SoD assessments, and remediation efforts designed to strengthen enterprise governance and reduce operational risk.

The successful candidate will possess strong analytical, auditing, and documentation skills with the ability to evaluate complex business processes, financial systems, and access control structures while developing practical and compliant solutions.

• Conduct segregation of duties (SoD), access control, and enterprise governance assessments across applications and systems.
• Evaluate system access models, user entitlements, privileged access, and approval workflows to identify control weaknesses and compliance risks.
• Support internal and external audit activities through analysis, documentation, testing, and remediation support.
• Analyze financial, business, and operational processes to evaluate compliance with Federal and DoD requirements.
• Review application access configurations, role definitions, and security controls for compliance with established policies and standards.
• Develop findings, risk assessments, recommendations, and corrective action plans supporting audit and compliance objectives.
• Collaborate with application owners, cybersecurity personnel, and governance teams to address identified access and control deficiencies.
• Support enterprise role reviews, access certifications, and user entitlement analysis activities.
• Develop audit workpapers, reports, presentations, and compliance documentation for government stakeholders.
• Support AMPS governance initiatives, audit readiness efforts, and ongoing process improvement activities.
• Must have the ability to communicate accurate information

Sensitivity Level Non-Critical Sensitive

Must possess or be able to obtain an IT-II Non-Critical Sensitive (Tier 3/T3) determination prior to onboarding.

Must possess DoD 8140 IAT Level II Certification (e.g., Security+ CE)

Bachelor's degree in Accounting, Information Systems, Business, Cybersecurity, Information Technology, or a related discipline.

Certified Public Accountant (CPA) in good standing.

4+ years of financial, business, information systems audit, or related experience, including at least 1 year of government experience.

Experience performing information systems audits, controls assessments, compliance reviews, or risk evaluations.

Experience evaluating access controls, segregation of duties (SoD), and enterprise governance processes.

Understanding of system development life cycle phases, requirements documentation, and system design documentation.

Knowledge of Federal Financial Management Improvement Act (FFMIA) requirements and their application to financial systems.

Knowledge of Federal Information Systems Controls Audit Manual (FISCAM), GAO audit guidance, and applicable federal audit standards.

Familiarity with OMB Circulars A-123, A-127, and A-134.

Familiarity with Federal Acquisition Regulations

Experience supporting SAP and/or non-SAP enterprise application environments.

Experience Supporting DoD, DLA, Or Other Federal Government Customers.

Proficiency with Microsoft Office Suite, including Excel, Word, PowerPoint, and Project.

Strong analytical, problem-solving, written, and verbal communication skills.

Experience performing enterprise Segregation of Duties (SoD) analysis and remediation activities.

Experience supporting Identity and Access Management (IAM), Identity Governance, or Access Governance programs.

Experience evaluating role-based access models, entitlement structures, and privileged access controls.

Experience supporting federal financial systems, audit readiness initiatives, or internal control programs.

Experience developing audit workpapers, risk assessments, corrective action plans, and executive-level reports.

Experience supporting annual financial statement audits, compliance reviews, or Inspector General assessments.

Experience supporting the Defense Logistics Agency (DLA) or enterprise logistics and financial management systems.

Familiarity with RMF, cybersecurity compliance requirements, and access control assessment methodologies.

Experience collaborating with application owners, auditors, and technical teams to implement corrective actions.

Relevant certifications such as CISA, CGFM, CIA, CISM, CISSP, or related audit, governance, and cybersecurity certifications.

Benefits include

• Medical, Dental, and Vision Plans (PPO & HSA options available)
• Flexible Spending Accounts (Health Care & Dependent Care FSA)
• Health Savings Account (HSA)
• 401(k) with matching contributions
• Roth
• Qualified Transportation Expense with matching contributions
• Short Term Disability
• Long Term Disability
• Life and Accidental Death & Dismemberment
• Basic & Voluntary Life Insurance
• Wellness Program
• PTO
• 11 Holidays
• Professional Development Reimbursement

Salary-100-140k

Amyx is proud to be an Equal Opportunity Employer. All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. Amyx is a VEVRAA federal contractor and we request priority referral of veterans.

Physical Demands

Employee needs to be able to sit at a workstation for extended periods; use hand(s) to handle or feel objects, tools, or controls; reach with hands and arms; talk and hear. Most positions require ability to work on desktop or laptop computer for extended periods of time reading, reviewing/analyzing information, and providing recommendations, summaries and/or reports in written format. Must be able to effectively communicate with others verbally and in writing. Employee may be required to occasionally lift and/or move moderate amounts of weight, typically less than 20 pounds. Regular and predictable attendance is essential.