Hybrid IT Auditor en M9 solutions

M9 Solutions is seeking an IT Auditor to work on a government contract for a client located in Tysons or Arlington, VA. An active Secret clearance is required.

Responsibilities

• Be prepared to provide recommendations to the client by reviewing business process documentation.
• Attend business process sprints and provide subject matter expertise regarding SAP IT security control design. 
• Provide expertise on modules/applications/tools to support S4/HANA on-premises IT security (authentication, SIEM, interface file processing, audit logging, etc.). 
• Identify IT control gaps in legacy systems that would impact auditability and compliance; make recommendations for future state control design.
• Provide ERP configuration recommendations that support auditability, security, and compliance. 
• Provide rules, guidance, validation, framework, and expert knowledge to support third-party design and implementation of the Information Technology General Controls that provide the client’s IT systems auditable controls. 
• Through coordination with business process teams, gain an understanding of the audit issues identified and communicate requirements recommendations that would mitigate these issues within the future state environment. 
• Subsequent to the completion of business process sprints, develop recommendations, in the form of white papers, for the requirements that are needed to mitigate audit risks within the future state environment. 

Required Skills & Qualifications

• Active Secret security clearance.
• 6+ years of federal experience and a master’s degree, OR one of the following certifications: PMP, CDFM, CGFM, CPA, or CISA.
• Familiarity with federal accounting and federal financial management.
• Familiarity with internal controls and/or ITGC.
• Experience performing SAP analyses utilizing the EY Risk Navigator tool, including SOD Rulesets, Role Design, ITGC configurations, Application Controls, Emergency Access (i.e., FireFighters).