IT Audit Manager

Menu

• Who We Are

• Our Company Our mission is simple, our vision is clear, and our values are strong.

• Our Team Our people are our greatest asset — they will be one of yours as well.

• Our Joint Venture AdvanceX combines Noblis ESI R&D with Assurit cybersecurity expertise.

• Our Clients We are a nationwide trusted partner to the public and private sectors.

• Awards & Accomplishments Follow our journey as we work for the advancement of cybersecurity.

• Press Contract awards, strategic partnerships, and mission-driven milestones.

• What We Do

• Implementation & Advisory Develop and implement sustainable security strategies

• Risk Management Solutions

• Governance & Cyber Program Development

• Third-Party Security

• Privacy & Data Protection

• Assessment & Compliance Anticipate and alleviate risks that can threaten your business

• Audit Readiness

• Penetration Testing

• Vulnerability Scanning & Assessments

• Security Assessment & Authorization (SA&A)

• Incident & Threat Management Prevent, manage and recover from security incidents

• Data Breach Readiness

• Tabletop & Simulated Exercises

• Incident Response

• Threat Hunting

• Security Architecture & Engineering Build, deploy and monitor effective cyber safeguards

• Cloud Security

• Continuous Monitoring

• Business Continuity & Disaster Recovery

• Enterprise Mobility

• Capabilities

• Our Capabilities Discover Assurit’s ability to deliver tailored and effective solutions to your most complex cybersecurity challenges.

• Small Business Certifications

• Quality Initiatives

• NAICS / Product & Service Codes

• Certifications & Contract Vehicles

• Core Capabilities & Staff Qualifications

• Our Capabilities Our proven methodologies will tackle your most complex challenges.

• Case Studies Our extensive experience demonstrates our ability to drive measurable impact.

• Capability Statement (PDF) Download our PDF Capability Statement

• Contract Vehicles

• SBA 8(a) Certified SBA 8(a) Sole-Source and Competitive

• GSA Schedule GSA Multiple Award Schedule (MAS)

• NASA SEWP VI Solutions for Enterprise-Wide Procurement

• GSA 8(a) STARS III GSA 8(a) STARS III

• NASPO ValuePoint NASPO ValuePoint

• MDA SHIELD IDIQ MDA SHIELD

• SeaPort NxG Navy SeaPort Next Generation (NxG)

• eFAST FAA eFAST

• Maryland CATS+ Maryland CATS+

• Careers

• Contact

• CMMC L2

• SBA 8(a)

• ISO 9001

• ISO 27001

• ISO 20000-1

• CMMI-SVC ML3 v2.0

• CAGE 6VE87

• UEI DL3JL6J1XG98

Assurit Cybersecurity

IT Audit Manager

• Hybrid – National Capital Region (NCR), Washington, DC Metro Area
• Posted on October 23, 2026

Assurit Assurit is currently seeking an experienced IT Audit Manager to support one of our clients.

About The Role Assurit is seeking an experienced IT Audit Manager to support the Department of the Air Force (DAF). We are seeking a Manager to lead the IT Audit Remediation function, directing the strategy and execution of remediation activities addressing audit findings and control gaps across IT systems and processes. This leader will own remediation plans, drive control owners and stakeholders to closure, and validate that implemented controls are designed and operating effectively. As the primary escalation point for the client, they will deliver executive-level reporting, surface risks early, drive prioritization decisions, and ensure strong governance across the remediation lifecycle.

A leader who independently owns multiple remediation workstreams, manages competing priorities, and proactively manages upward—bringing leadership risks, recommendations, and decisions, not just status updates. Comfortable as the senior coordination point across control owners, auditors, and system teams with minimal oversight.

Location: Local to NCR – ability to support the on-site Joint Base Andrews (JBA) requirement 1-2 times a week. Hybrid – Remote, Joint Base Andrews, Contractor Facility in Arlington, VA.

Start Date: ASAP

Responsibilities

• Driving closure of planned DAF IT NFRs for the current Fiscal Year
• Overseeing CAP development coaching and NFR closure validation
• Leading off-site NFR system deep-dive workshops
• Managing MOUs defining roles/responsibilities across audit support functions
• Owning SOPs for Audit Liaison, A-123 support, NFR remediation, CAP tracking, and third-party oversight
• Directing AFAA controls testing metrics and reporting
• Managing FIAR scoping forms and ICOFR system lists
• Overseeing data quality and interface control testing
• Leading annual FISCAM, FFMIA, and CUEC assessments
• Tracking self-identified deficiencies and validating compensating controls
• Guiding IT control rationalization/standardization playbooks
• Facilitating FM overlay guidance aligned to DAF’s RMF
• Perform quality assurance reviews of IT deliverables, remediation deliverables, and work products.
• Responsibility for quality control, review and approval of working papers and findings and adherence to applicable standards, laws, policy, and regulations.
• Lead teams for complex workstreams involving IT audit remediation, FISCAM, cybersecurity, financial reporting, accounting, audit remediation, and/or internal controls.

Required Qualifications

• DAF or other DOW Agency IT Audit/Remediation Support experience
• Proven experience leading audit remediation or compliance efforts, including managing staff/workstreams
• Strong knowledge of FISCAM, NIST, and FFMIA as applied to IT general controls and financial systems
• Experience building remediation plans (root cause, corrective actions, ownership, timelines) and validating control design/effectiveness
• Experience managing senior stakeholder relationships across IT, security, finance, and external audit
• Command of IT control domains: access, change, and configuration management, segregation of duties, interface controls, system operations
• Experience preparing/presenting reporting to leadership, auditors, and governance forums
• Skilled at identifying and escalating remediation risks and dependencies
• Experience supporting external audits, including control testing methodologies and auditor coordination
• Excellent communication skills, able to translate technical issues into business/compliance impact for executives
• Minimum 10 years of relevant professional experience.
• Bachelor’s degree in information systems management, computer science, accounting, business management, or other relevant field. Four years of relevant experience may substitute for a bachelor’s degree for candidates qualifying under the Accounting Level IV labor category.
• Relevant professional certification: CISA, CISSP, IAT II, CPA, CIA, CDFM, CGFM, or similar IT professional certification, as applicable to the qualifying labor category.
• Experience supporting systems consolidation/migration, modernization, ERP implementation, IT system audit remediation, IT audit reviews, IT system control documentation, and/or FISCAM and Risk Management Framework (RMF) implementation and sustainment for federal or state agencies or large, complex companies (greater than 1,000 employees).
• Demonstrated experience in SAP, Oracle Federal Financials, or other relevant financial systems environments, as applicable to the qualifying labor category.
• Experience leading financial management services and related projects, performing financial statement audits in DoD, federal agencies, or commercial Fortune 400 organizations, and/or preparing assertions packages, as applicable to the qualifying labor category.

Preferred Qualifications

• Experience with/auditing SailPoint, CyberArk, AWS, Azure, Splunk
• Familiarity with DAF/DOW business process architecture (e.g., BEA Framework)
• Experience leading large, complex engagements
• Federal financial statement audit experience
• SSAE No. 18 audit or assessment experience
• Audit readiness preparation IAW FIAR Guidance
• GAAP / GAGAS / ICOFR experience
• OMB Circulars A-123, A-127, A-134, A-136 and other OMB policies and federal financial management system requirements
• FISCAM experience and requirements
• FASAB, SSAC, and SFFAS experience
• Oracle Federal Financials functionality
• Current trends in information technology and/or cybersecurity
• Air Force policies, systems and procedures for financial management, personnel, acquisition, inventory, property and material management
• Familiarity with the Operational AF Financial Data Structure and Operational AF data Dictionary
• Proven ability to interact and communicate effectively with auditors, specifically the IG Community and/or the GAO

Clearance

• DOD full secret

Apply for Position

Working at Assurit

Assurit is an award winning, certified small business headquartered in Fairfax, VA. We offer a highly competitive compensation and benefits package inclusive of medical and dental coverage, as well as paid time off. Founded in 2013, Assurit has become a trusted provider of cybersecurity expertise to customers across federal, state and local governments, as well as the commercial sector. We are an employee-centric organization that focuses on the growth and development of our greatest asset – our people. We believe that if our Team is trained and educated, we will always be able to deliver our promise of customer success. If you enjoy work environments focused on continuous learning and growth, Assurit will be a great fit for you.

Whether you saw a specific job opening of ours or are simply interested in learning more about building your career at Assurit, feel free submit your resume. Based on your request, the appropriate individual within our organization will get back to you within 2 business days.

Assurit is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. To apply for this job email your resume to [email protected]

Spread the Word

open positions

• IT Audit Manager
• Senior Network Defense Analyst
• Cyber Policy Analyst / Technical Writer
• Human Risk Manager / Cybersecurity Awareness Professional SME
• PMO Analyst
• Senior RMF Security Analyst
• Enterprise Asset Management & Data Quality SME
• Enterprise Interface Specialist
• Data Engineering & Reconciliation Specialist
• IT Audit Remediation Analyst
• QA Tester – SailPoint IdentityIQ / IAM Automation
• Mid-Level SailPoint IdentityIQ Developer (ICAM)
• Senior SailPoint IdentityIQ Developer (ICAM)
• Cyber Tools Senior Test & Evaluation Engineer
• Sr. Systems Engineer / Integrator

How can we meet your needs?

Speak to a member of our leadership team today.

Let’s Connect

Assurit

11325 Random Hills Road

Suite 360

Fairfax, VA 22030

(703) 225-3305

(703) 226-6201 (fax)

[email protected]

SBA 8(a), ISO 9001:2015, ISO/IEC 27001:2022, ISO/IEC 20000-1:2018, CMMI-SVC ML3 v2.0, CMMC L2, NAICS & PSC CODES

• Implementation & Advisory

• Risk Management Solutions

• Governance & Cyber Program Development

• Third-Party Security

• Privacy & Data Protection

• Assessment & Compliance

• Audit Readiness

• Penetration Testing

• Vulnerability Scanning & Assessments

• Security Assessment & Authorization (SA&A)

• Incident & Threat Management

• Data Breach Readiness

• Tabletop & Simulated Exercises

• Incident Response

• Threat Hunting

• Security Architecture & Engineering

• Cloud Security

• Continuous Monitoring

• Business Continuity & Disaster Recovery

• Enterprise Mobility

recent articles

• Assurit Awarded NASA SEWP VI Contract in Categories B and C By Denise L. Pho
• Assurit's 8(a) STARS III Contract Extended Through 2029 By Denise L. Pho
• Assurit Achieves CMMC Level 2 Certification Following Independent C3PAO Assessment By Denise L. Pho
• Capability Statement (PDF)
• Blog
• Career Opportunities
• Sitemap

©2026 Assurit All Rights Reserved

Site by Cara Cairns Design, Inc.

Capability PDF

Contact

Contact

(703) 225-3305 M - F, 8am - 6pm

Message

Same or Next Business Day Response

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Δ