Skip to content

Cyber Enablers · Work role code 805

IT Program Auditor

Conducts evaluations of an IT program or its individual components, to determine compliance with published standards.

From DoD DCWF Tool v5.3 (2026-09-25)

Tasks

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 537Develop methods to monitor and measure risk, compliance, and assurance efforts.Core
  • 811Provide ongoing optimization and problem solving support.Additional
  • 813Provide recommendations for possible improvements and upgrades.Additional
  • 840BReview or conduct audits of programs and projects.Core
  • 936Develop security compliance processes and/or audits for external services (e.g., cloud service providers, data centers).Additional
  • 949Evaluate the effectiveness of procurement function in addressing information security requirements and supply chain risks through procurement activities and recommend improvements.Additional
  • 1143AConduct import/export reviews for acquiring systems and software.Core
  • 1147ADevelop data management capabilities (e.g., cloud based, centralized cryptographic key management) to include support to the mobile workforce.Additional
  • 1148BEnsure supply chain, system, network, performance, and cyber security requirements are included in contract language and delivered.Additional
  • 5610Review service performance reports identifying any significant issues and variances, initiating, where necessary, corrective actions and ensuring that all outstanding issues are followed up.Additional

Knowledge

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 22* Knowledge of computer networking concepts and protocols, and network security methodologies.Core
  • 62Knowledge of industry-standard and organizationally accepted analysis principles and methods.Additional
  • 68Knowledge of information technology (IT) architectural concepts and frameworks.Additional
  • 69AKnowledge of risk management processes and requirements per the Risk Management Framework (RMF).Core
  • 107Knowledge of resource management principles and techniques.Additional
  • 108* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).Core
  • 129Knowledge of system life cycle management principles, including software security and usability.Additional
  • 296Knowledge of how information needs and collection requirements are translated, tracked, and prioritized across the extended enterprise.Additional
  • 954Knowledge of import/export control regulations and responsible agencies for the purposes of reducing supply chain risk.Additional
  • 979Knowledge of supply chain risk management standards, processes, and practices.Additional
  • 1004AKnowledge of information technology (IT) acquisition/procurement requirements.Additional
  • 1021Knowledge of risk threat assessment.Additional
  • 1037Knowledge of information technology (IT) supply chain security and risk management policies, requirements, and procedures.Additional
  • 1061AKnowledge of the acquisition/procurement life cycle process.Additional
  • 1125Knowledge of Cloud-based knowledge management technologies and concepts related to security, governance, procurement, and administration.Additional
  • 1130Knowledge of organizational process improvement concepts and process maturity models (e.g., Capability Maturity Model Integration (CMMI) for Development, CMMI for Services, and CMMI for Acquisitions).Additional
  • 1133Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).Additional
  • 1136AKnowledge of use cases related to collaboration and content synchronization across platforms (e.g., Mobile, PC, Cloud).Additional
  • 1157* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.Core
  • 1158* Knowledge of cybersecurity principles.Core
  • 1159* Knowledge of cyber threats and vulnerabilities.Core
  • 6290Knowledge of how to leverage government research and development centers, think tanks, academic research, and industry systems.Additional
  • 6900* Knowledge of specific operational impacts of cybersecurity lapses.Core
  • 6935* Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).Core
  • 6938* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.Core
  • 7111* Knowledge of Zero Trust Security Model Principles.Core

Skills

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 203Skill in identifying measures or indicators of system performance and the actions needed to improve or correct performance, relative to the goals of the system.Core
  • 1002Skill in conducting audits or reviews of technical systems.Core
  • 6942Skill in designing or implementing cloud computing deployment models.Additional
  • 6945Skill in migrating workloads to, from, and among the different cloud computing service models.Additional

Abilities

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 325AAbility to ensure security practices are followed throughout the acquisition process.Additional
  • 6918Ability to apply cybersecurity strategy to cloud computing service and deployment models, identifying proper architecture for different operating environments.Additional
  • 6919Ability to determine the best cloud deployment model for the appropriate operating environment.Additional

Workforce Automation analysis, not part of the source

O*NET jobs

WFA · Part of the paid plan when accounts open

Jobs the ETO-CSET NICE/O*NET crosswalk (2024) maps to this role’s NICE equivalents, with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill.

No O*NET jobs reach this role.

    Equivalents

    NICE work roles

    From DoD DCWF Tool v5.3 (2026-09-25), linked from published ids only, never from titles

    Free · DoD DCWF Tool v5.3 (2026-09-25)

    O*NET jobs it reaches

    Through its NICE equivalents, by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3

    Free · O*NET 30.3

    No O*NET job reaches this role.