> Markdown version of [/jobs/ext/1181482-it-systems-audit-manager-audit-subject-matter-expert-sme-active-secret-clearance](https://www.wearedevelopers.com/jobs/ext/1181482-it-systems-audit-manager-audit-subject-matter-expert-sme-active-secret-clearance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Systems Audit Manager / Audit Subject Matter Expert (SME) - Active Secret Clearance - **Company:** Ariel Partners - **Location:** Stafford, VA, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Word, Microsoft Excel, Artificial Intelligence, Cyber Security, Information Systems, Identity and Access Management, Information Technology Audit, Machine Learning, Microsoft Office, Oracle (Applications), Microsoft PowerPoint, SAP GRC, Documentation System, SC Clearance, Information Technology - **Published:** July 4, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=6af415c2219104ef ## About the Role * Must hold Active Secret Clearance * Bachelor's degree in Accounting, Information Systems, Computer Science, or a related field. * At least 6 years of relevant financial, IT audit, or compliance experience, including 2 years leading audit projects in a government or DoD environment. * Strong knowledge of federal auditing standards, including OMB Circulars A-123, A-127, A-134, and FISCAM. * Experience in DoD/DLA systems auditing and authorization. * Expertise in information security, access management, and segregation of duties (SoD) * Proficient in Microsoft Office suite (Excel, Word, PowerPoint, Project) and audit documentation tools. * Excellent analytical, documentation, and communication skills. * Relevant Certifications from a nationally recognized authority (e.g., CISA, CPA, or equivalent)., * Experience with SAP GRC, Oracle Identity Governance, or similar enterprise identity and access management systems. * Familiarity with RMF, NIST SP 800-53, and DISA STIGs. * Prior experience managing Corrective Action Plans (CAPs) and audit remediation tracking. * Knowledge of automated tools and AI/ML applications for audit or compliance monitoring. ## Description The IT Systems Audit Manager / Audit SME will provide expert guidance and oversight for auditing, compliance, and risk management within the Legacy AMPS and associated DLA systems. This role ensures that all systems, applications, and processes adhere to federal, DoD, and DLA regulations and standards. The position involves leading audit activities, providing technical and administrative guidance, and ensuring that corrective actions are implemented to meet enterprise-wide audit requirements. The SME will work closely with government personnel, project managers, and system teams to support audit readiness and system compliance., * Lead audit and assessment activities for Enterprise Segregation of Duties (SoD), GRC, and Privileged Access Management (PAM) within Legacy AMPS and DLA enterprise systems. * Conduct walkthroughs, Testing of Design (TOD), Testing of Effectiveness (TOE), and provide documentation to support internal and external audit reviews. * Develop and maintain Corrective Action Plans (CAPs) to remediate identified risks and audit findings. * Provide guidance for enterprise policy development, including POLP, Emergency Access Management, and Privileged Access Management policies. * Prepare and deliver quarterly SoD compliance reports, annual Statements of Assurance (SoA), and other audit-related documentation. * Participate in weekly status meetings and maintain audit-related metrics and reports for the COR and PMO. * Collaborate with IT, cybersecurity, and program teams to ensure alignment with DoD RMF, NIST 800-53, and other applicable standards. * Provide training and guidance to government and contractor personnel on audit and compliance requirements. * Oversee implementation of audit findings, ensuring closure and adherence to DLA audit standards. ## Related Videos - [Developing the Rich Text Editor for DeepL.com](https://www.wearedevelopers.com/videos/1172-developing-the-rich-text-editor-for-deepl-com) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)