IT Systems Auditor- Senior

BMA is seeking a IT Systems Audit - Senior to join our team. This is a remote role.

Job Summary 

• Has extensive experience in auditing complex IT and financial systems.

• Holds one or more advanced certifications (CASP+ CE, CISA, CISM, CISSP, CCSP) and has a strong background in federal IT compliance frameworks such as FISCAM, ISO 27001/2, and NIST SP 800-53.

• Provides technical leadership and direction on audit and advisory engagements, focusing on federal compliance and system control assessments.

• Apply federal accounting principles to assess and analyze data across various IT and financial systems.

• Lead audit engagements assessing compliance with FFMIA, FICAM, FISCAM, and related frameworks.

• Evaluate information system controls in areas such as cybersecurity, access management, change control, and segregation of duties.

• Analyze and interpret system development life cycle (SDLC) documentation, including requirements, design, and implementation artifacts.

• Plan, execute, and report on IT control assessments with clear, actionable findings and recommendations.

• Assess ERP system control environments and support remediation activities where required.

• Develop comprehensive working papers and summary reports to document audit results.

• Collaborate with clients, stakeholders, and internal teams to ensure alignment with federal regulations and best practices.

Clearance Requirements 

There is a IT-II security clearance or a current National Agency Check with Local Agency Check and Credit Check (NACLC) Clearance requirement for this position. 

Required Skills & Certifications

• Bachelor’s degree in a relevant business or technical discipline.

• At least 4 years of relevant experience in IT/IS or financial systems auditing, including a minimum of 2 years working with FISCAM, ISO 27001/2, or NIST 800-53 frameworks.

• One or more of the following certifications:

  • COMPTIA Advanced Security Practitioner (CASP+ CE)

  • Certified Information Systems Auditor (CISA)

  • Certified Information Systems Manager (CISM)

  • Certified Information Systems Security Professional (CISSP)

  • Certified Cloud Security Professional (CCSP)

• Proficient in Microsoft Office Suite (Excel, Word, PowerPoint, MS Project).

• Strong analytical, verbal, and written communication skills.

Desired Skills & Certifications

• Experience working with the Department of Defense (DoD) and/or Defense Logistics Agency (DLA).

• Familiarity with Federal Acquisition Regulations (FAR) and the acquisition lifecycle.

• Knowledge of OMB Circulars including:

  • A-123: Management’s Responsibility for Internal Control

  • A-127: Financial Management Systems