Senior FIAR_FISCAM Auditor

Location: Scott Air Force Base

Overview

The United States Army Transportation Command (ARTRANS) is the Army Service Component Command of the United States Transportation Command (USTRANSCOM). The Transportation Financial Management System (TFMS) is the Oracle Financials-based enterprise financial management system solution in use by SDDC as its overall financial and reporting system. The Savantage support team provides technical and functional expertise to the TFMS Program Manager and users to ensure timely monthly and yearly closures of financial activities within TFMS, transition of functional configuration issues to the appropriate staff, and provide development and maintenance of TFMS Interfaces, SDDC Reporting requirements and System Change Requests (SCRs) Support, audit readiness support, Cybersecurity support, and Operational Environment sustainment.

Duties & Responsibilities

Audit Readiness and Compliance Leadership

• Serve as the TFMS program's primary point of contact for all FIAR audit activities, representing the program in interactions with USTRANSCOM Audit Support teams, the OUSD(C) financial auditors, and independent audit firms.
• Ensure TFMS continuously complies with FISCAM guidance for IT general controls (ITGCs), application controls, and financial reporting controls across all Oracle EBS R12 modules (Accounts Payable, Accounts Receivable, General Ledger, Projects, Fixed Assets, Purchasing, Oracle Time and Labor, and CLM).
• Maintain awareness of evolving FISCAM control requirements and proactively identify gaps in TFMS application configurations, custom code, interfaces, and cloud infrastructure.
• Coordinate annual FISCAM control walk-throughs with USTRANSCOM and ensure all program-specific input is accurate and complete.

Audit Artifact Development and Submission

• Develop, compile, and submit TFMS cloud-related and cybersecurity artifacts in response to auditor inquiries and FISCAM findings using the OUSD(C) FIAR Audit Response Center (ARC) tool and SharePoint-based workflows.
• Draft, update, and maintain all TFMS audit documentation including corrective action plans, control narratives, process flow diagrams (as-is and to-be), evidence packages, and POA&M items related to audit findings.
• Ensure audit-related System Change Requests (SCRs) are submitted, tracked, and completed prior to Corrective Action Plan (CAP) milestone dates or auditor-imposed deadlines, working closely with the technical and functional sustainment teams.
• Support preparation of and responses to all FISCAM control findings and auditability requirement inquiries, including clarifications and supplemental artifact submissions.

Corrective Action Plan (CAP) Management

• Lead the development and monitoring of CAP milestones in response to financial auditor findings across all FISCAM control domains applicable to TFMS (e.g., Security Management, Access Controls, Configuration Management, Contingency Planning, Financial Reporting).
• Facilitate CAP progress reporting meetings with the USTRANSCOM Audit Support team, G8 Financial Management, and TFMS PMO; prepare status briefings and written updates.
• Coordinate with technical leads, DBAs, system administrators, and functional SMEs to ensure technical remediation activities align with CAP timelines and produce verifiable audit evidence.
• Track closure of audit findings in the ARC tool and eMASS; maintain complete and accurate records of remediation evidence.

FISCAM Control Documentation and Sustainment

• Maintain and update all TFMS FISCAM-related documentation whenever changes are made that may affect the financial auditability of the application, including cloud architecture changes, interface modifications, patch deployments, and new module configurations.
• Develop and update cloud-related audit documentation to reflect the TFMS Commercial Gov Cloud (AWS) environment and the forthcoming Cloud One OCI migration.
• Sustain the TFMS FISCAM Burn Down Plan and ensure all corrective actions are progressing toward full audit compliance.
• Maintain the TFMS FISCAM controls mapping to NIST SP 800-53 and FISMA requirements, ensuring consistency with the TFMS Risk Management Framework (RMF) System Security Plan (SSP).

Interface and…