Experienced IT Audit & Compliance Analyst (CPA or CISA)

Overview

Role Overview

We are seeking a detail-oriented and analytical IT auditor to join our Audit & Compliance team. The Audit & Compliance team supports a wide range of internal and external audit activities, including financial and control reviews performed by agencies such as DCAA, SUPSHIP, internal, and external auditors. The team ensures compliance with federal regulations, GAAP, COSO, SEC, etc. The group is also responsible for governance of labor‑charging practices, validating the accounting for capital assets, and overseeing the inventory cycle count program.

The individual will be responsible for understanding and evaluating the design and operating effectiveness of our IT General Controls (ITGC’s), information security protocols, and system implementations. The individual’s work will directly protect company assets by identifying vulnerabilities and partnering with business stakeholders to develop actionable remediation plans. This will include managing the Governance, Risk, and Compliance (GRC) modules within the Oracle ERP finance system.

A CPA or CISA with a strong understanding of IT systems and compliance is required. Additionally, the group performs special reviews at the direction of senior or executive management.

Key Responsibilities

Responsibilities may include, but are not limited to:

• IT General Controls (ITGCs): Ensure compliance with SOX, SOC1/SOC2, and internal policies.
• Support the company’s Governance, Risk & Compliance (GRC) program, which includes overseeing daily operations of SafePaaS GRC modules.
• Work with Finance and Supply Chain to promote Oracle Changes.
• Run Alteryx Workflows for Custodians, Annual Oracle User Access reviews, and other workflows as developed and required.
• Daily Review of ServiceNow (SNOW) incidents and requests to ensure that finance related Oracle user access requests for Finance are processed.
• Monthly manual JE Review to ensure Segregation of Duties.
• Oversee and monitor DCAA’s access to EB Systems.
• Support testing of EB Finance Oracle responsibilities due to Oracle upgrades or enhancements.
• Develop & Run Data Analytic scripts.
• Collaborate with DCAA, SUPSHIP, and other agencies as required.
• Support SUPSHIP and DCAA business system access requests.
• Support the department’s annual overhead audit.
• Routinely work with multiple departments and functions across the organization.
• Engage professionally with all levels of internal and external management and customers.
• Support leadership including Supervisors, Senior Managers, Controller, VP Finance, and the CFO as needed.
• Support SOX audits and internal audits when required.

Qualifications

Required Education & Experience

• Certified Information Systems Auditor (CISA) Or Certified Public Accountant (CPA)
• Bachelor’s Degree in Information Technology, Computer Science, Accounting, or related field.
• 3+ years of progressive experience in IT auditing, internal controls testing, or information security.

Preferred Qualifications

• Strong understanding of ERP systems (i.e., Oracle), and data analysis tools (i.e., SQL, Alteryx, Power BI).
• Experience with GRC software such as SafePaaS or Oracles Application Access Control Governor, Transaction Control Governor and Change Control Governor.
• Prior involvement in SOX or internal auditing activities.
• System implementation experience and project management.
• Exposure to FAR/DFAR regulatory requirements.

Skills

• Impeccable professional judgment, advanced critical thinking, and strong verbal and written communication skills to articulate complex risks to non-technical audiences.
• Strong organizational and analytical skills.
• Ability to multi‑task, prioritize, and meet multiple deadlines.
• High proficiency in Oracle EBS, Excel, Power BI, and Word.
• Strong interpersonal skills.
• Demonstrated problem‑solving and process‑improvement capabilities.

Physical Qualifications