Job Description
The mission of Savannah River National Laboratory (SRNL) Internal Audit (IA) is to provide independent, objective assurance and consulting services designed to add value and improve the organization's operations. Internal Audit helps the organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, internal controls, and governance processes.
The Internal Audit Specialist will serve as a subject matter expert with a strong understanding of Information Technology (IT) control frameworks, information security, cyber security, data analytics, and technology risks. Additionally, the Internal Audit Specialist will bring professional experience and technical skills that enhance Internal Audit services, ensure adherence to industry standards and regulatory requirements, foster collaboration, and drive continuous improvement. This position presents a unique opportunity for an innovative and collaborative IA professional to play an integral role supporting the Internal Audit Director with developing, designing, and implementing a strategic IA program.
Responsibilities
•Assist in the development and deployment of services focused on risks related to the IT infrastructure and controls, cybersecurity, information assurance, etc.
•Lead and assist in all stages of internal audit engagements (planning, performing, reporting, follow-up) with limited oversite.
•Develop data analytics tools and dashboards utilizing ERP and other organizational data to enhance audit procedures, detect red-flags, and highlight insights and trends.
•Assist in the implementation of ERP system control monitoring and testing capabilities to drive compliance and improve OMB A-123 testing efficiency.
•Support IA engagements through developing and performing complex data analysis.
•Scope, design, develop and deploy systems and processes for independently validating the integrity of SRNL's ERP and other IT systems data.
•Validate the integrity of data conversion and integration activities as part of an ERP system implementation.
•Provide insights and recommendations in evaluating overall IT risk, data governance, and audit readiness strategy and processes.
•Perform fuzz testing.
•Assist in designing and implementing continuous auditing and monitoring programs, perform control design assessments, segregation of duties assessments, key report testing, risk analytics and integrated risk management services.
•Develop threat modeling tools and techniques that incorporate security requirements, evaluate security threats/vulnerabilities, and quantify the risks for remediation.
•Review audit work papers and supporting documentation for completeness, accuracy, and logical conclusions to provide tools for effective risk mitigation through the implementation and adherence to recognized auditing standards.
•Maintain, update, and track audit activities in IA management tool software.
•Assist the Lab in assessing compliance with key requirements associated with Federal Acquisition regulations (FAR), Department of Energy Acquisition Regulation (DEAR), Cost Accounting Standards (CAS), Defense Federal Acquisition Regulations Supplements (DFARS), Defense Contract Audit Agency (DCAA), and other requirements and best practices.
•Develop and provide training to SRNL employees.
•Perform special reviews and projects as requested by Lab management and/or the Finance and Audit Committee of the Board of Directors, including privileged and confidential reviews.
•Coordinate preparation of reports and memorandums for audit engagements and present key findings and recommendations to stakeholders and senior management.
•Prepare and maintain high quality work papers.
•Assist in developing and improving Internal Audit's Quality Assurance Program.
Qualifications
Preferred Qualifications
•Relevant experience working in a DOE National Laboratory environment.
•Proven audit experience.
•Experience designing and implementing descriptive and predictive analytics, continuous monitoring, and automation tools to facilitate audit efficiencies, enhance controls and compliance and deliver valuable insights across SRNL.
•Strong knowledge of Federal Acquisition Regulations (FAR), Department of Energy Acquisition Regulation (DEAR), Cost Accounting Standards (CAS), etc.
•Strong background in IT audit, cybersecurity, risk management, and experience auditing financial systems.
•Knowledge of the Federal Information Security Modernization Act (FISMA), Defense Information Systems Agency (DISA), National Institute of Standards and Technology (NIST), etc.
•Knowledge of and experience with internal auditing under the Institute of Internal Auditors (IIA) International Professional Practitioners Framework (IPPF).
•Experience with DOE's OMB A-123 including Internal Control Evaluations and Enterprise Risk Management.
•Professional designation: Certified Public Accountant (CPA), Certified Internal Auditor (CIA), Certified Information Security Auditor (CISA), Certified Software Testing Professional (CSTP), Certified Project Manager Certification (CSM), Certified Fraud Examiner (CFE), or qualified to obtain.
•Experience performing subcontract audits and/or incurred cost audits is a plus.
•Government auditing or accounting experience.
•Exposure to TeamMate or other audit work paper technology would be a benefit.
•Information technology (IT) audit experience is a plus.
•Master of Science in Information Security or related field.
•Experience with Oracle ERP.
Minimum Requirements
10 years of relevant experience, including IT governance, risk, compliance, and/or audit, cyber security, internal audit, information security, data analytics, or related area; A BS/BA/MS degree in computer science, management information systems, cybersecurity, accounting, data analytics, or related discipline; OR an equivalent combination of education and experience.
About Us
"We put science to work!"
Savannah River National Laboratory (SRNL) is a multi-program laboratory applying state of the art science and practical, high-value, cost-effective solutions to complex technical problems to protect the nation. Located at the U.S. Department of Energy's (DOE) Savannah River Site (SRS) in Aiken SC, the laboratory develops and deploys innovative technologies to address some of the nation's environmental, energy, and national security challenges.
Battelle Savannah River Alliance (BSRA) is constantly assessing trends to provide the best possible benefits to our workforce. We also negotiate cost effective premiums that will meet the needs of our evolving workforce.
Some of the *Benefits offered to employees include:
*Benefits vary based upon employment status

• Highly competitive Medical, Dental, and Vision options including HSA options with company provided seed
• Short & Long Term Disability (company paid)
• Life Insurance Non-Contributory 1X salary (company paid)
• AD&D Non-contributory 1x salary (company paid)
• Savings & Investment plan:
• Qualified Non-Elective Company Contribution of 5% each pay period with immediate vesting
• Company match 50 cents/dollar up to 8% (3 yr. vesting in company match)
• Contributory Life Insurance up to 5x Salary with $1M Cap
• Contributory AD&D (employee, spouse and children)
• Paid Time Off & Holidays
• Employee Assistance Plan

BSRA is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status. BSRA is also committed to making our workplace accessible to individuals with disabilities and will provide reasonable accommodations, upon request, for individuals to participate in the application and hiring process. Please email us at SRNLRecruiting@srnl.doe.gov with any questions regarding the hiring process or to request an accommodation.