management systems auditor