External Audit Consultant - Remote

Overview

An External Audit Consultant is needed to support ongoing activities for a customer in Washington, DC. This role is fully remote, with the option to periodically work on-site if desired.

Minimum clearance required: Minimum Clearance Required

• US Citizen

Responsibilities

• Participate in evaluating, developing, maintaining, and updating the technology compliance program.
• Advise technology support officers and technology managers on compliance, information security, and internal controls.
• Prepare technology departments for yearly financial statement audits and SOX internal control reviews.
• Assist in developing required documents to support internal SOX or FISMA reviews.
• Develop solutions with team members to minimize vulnerabilities.
• Advise the technology officer on SOX and compliance issues and recommend solutions.
• Provide weekly status reports to the COR documenting concerns, issues, risks, and progress.
• Recommend and help implement GRC tools to increase automation across compliance, auditing, and vulnerability detection.
• Design, test, and review controls for compliance, ensuring proper documentation is recorded.
• Create audit and monitoring reports used by the team, as directed.

Additional audit deliverables include:

• Thoroughly assess and validate SOX Risk Control Matrices (RCMs) for identified systems of record against Board policies; document findings and recommendations.
• Crosswalk SOX RCMs against Board Information Security Program (BISP) standards and procedures; document results.
• Provide recommendations, develop action plans, and help implement capabilities to improve compliance and security practices.
• Document updates to SOX compliance related policies, processes, procedures, and/or standards as directed by the compliance team.

Requirements

• Experience with financial applications.
• Experience evaluating cloud internal controls reports (SOC-1 and SOC-2).
• Ability to work on multiple complex assignments requiring analysis of control applicability and evaluation of control gaps for financial systems.
• Experience leading financial IT audits and developing audit and security related system documentation to reduce risk and meet control requirements.
• Experience developing a Risk Control Matrix and Test of Design and Test of Effectiveness (TOD/TOE).
• Minimum 5 years of progressively responsible experience in the information technology arena as an IT auditor, IT security analyst, IT manager, business analyst, system administrator, or a combination of these.
• Clear, concise, and effective verbal and written communication and project management skills for an unstructured matrix management environment.
• Ability to work independently and meet deadlines for assigned tasks.
• Experience assessing financial systems leveraging SOX, FISCAM, or COBIT Compliance strongly desired.

Preferred Qualifications

• CISSP or CISA certification strongly desired.
• Experience with Workday or Coupa a plus, but not required.

Compensation & Benefits

• A competitive compensation program and a comprehensive benefits package are offered.
• In compliance with Colorado’s Equal Pay for Equal Work Act, the annual base salary range for this position is listed as [not provided]. Salary information is a general guideline only. Factors considered include scope and responsibilities, candidate experience, education/training, key skills, internal peer equity, and market and business considerations when extending an offer.

Location

• Washington, DC (fully remote, with option to periodically work on-site if desired).

Physical Demands

• The employee will regularly sit, walk, stand, and climb stairs and steps.
• May require walking long distance from parking to work station.
• Occasionally requires movement involving twisting at the neck and/or trunk more than the average person, squatting/stooping/kneeling, reaching above the head, and forward motion.
• Continuous repetition of the same hand, arm, or finger motion.
• Manual and finger dexterity are essential.
• Vision abilities required: close, distance, depth perception, and telling differences among colors.
• Ability to communicate through speech with clients and public.
• Hearing required in both quiet and noisy environments.
• Lifting may require floor to waist, waist to shoulder, or shoulder to overhead movement of up to 20 pounds.
• Tolerance for various levels of mental stress is required.