External Audit SOX

Intone Inc; New York (NY); Hybrid; USD 83,000 - 124,000; Full time

Job summary

Intone Inc is seeking a 6-month contract IT Audit & Compliance specialist to join our Division of Information Technology Enterprise Services. The hybrid role requires about six on-site days per month in Manhattan, NY, supporting SOX, FISMA, and security controls for financial systems.

You will evaluate and update the technology compliance program, advise on control gaps, and prepare documentation for audits. Strong communication and project management are essential.

Qualifications

• At least five years of progressively responsible experience in IT audit, IT security, IT management, business analysis, or system administration.
• Demonstrated experience with financial applications and evaluating cloud internal controls reports (SOC-1/SOC-2).
• Experience managing multiple complex assignments, analyzing control applicability and gaps for financial systems.
• Experience developing a Risk Control Matrix and performing TOD/TOE (Test of Design/Effectiveness).
• Experience assessing financial systems using SOX, FISCAM, or COBIT frameworks.
• Clear, concise verbal and written communication skills; ability to work in an unstructured matrix environment.
• Project management skills and ability to work independently to meet deadlines.
• Preferred: lead financial IT audits and document security controls; CISSP or CISA certification; familiarity with Workday or Coupa.

Responsibilities

• Participate in evaluating, developing, maintaining, and updating the technology compliance program.
• Advise technology support officers and managers on compliance, information security, and internal controls.
• Prepare for yearly financial statement audits and SOX internal control reviews.
• Assist in documenting internal SOX or FISMA reviews.
• Develop solutions with team members to minimize vulnerabilities.
• Advise technology leadership on SOX/compliance issues and recommendations.
• Provide weekly status reports documenting concerns, issues, risks, and progress.
• Recommend and implement GRC tools to automate compliance, auditing, and vulnerability detection.
• Design, test, and review controls for compliance with proper documentation.
• Create audit and monitoring reports as directed.

Skills

IT audit experience

Financial applications experience

Cloud controls (SOC-1/SOC-2)

Project management

Risk Control Matrix

SOX/FISCAM/COBIT

Communication skills

Independent work

Audit leadership

CISSP

CISA

Workday

Coupa

Job description

This is a 6-month contract role supporting external audit and compliance activities for the Division of Information Technology Enterprise Services. The position is hybrid, requiring approximately 6 days per month on-site in Manhattan, New York.

Responsibilities

• Participate in evaluating, developing, maintaining, and updating the technology compliance program.
• Advise technology support officers and technology managers on compliance, information security, and internal controls.
• Prepare technology departments for yearly financial statement audits and SOX internal control reviews.
• Assist in developing required documentation in support of internal SOX or FISMA reviews.
• Develop solutions with team members to minimize vulnerabilities.
• Advise the technology officer of SOX and compliance issues and recommend solutions.
• Provide weekly status reports to the Contracting Officer's Representative documenting concerns, issues, risks, and progress.
• Recommend and help implement GRC tools to increase automation in compliance, auditing, and vulnerability detection.
• Design, test, and review controls for compliance and ensure proper documentation is recorded.
• Create audit and monitoring reports as directed.

Qualifications

• Required
  • At least five years of progressively responsible experience in the information technology arena as an IT auditor, IT security analyst, IT manager, business analyst, system administrator, or a combination of these.
  • Demonstrated experience with financial applications.
  • Experience evaluating cloud internal controls reports, including SOC-1 and SOC-2 reports.
  • Experience managing several complex assignments requiring analysis of control applicability and evaluation of control gaps for financial systems.
  • Experience developing a Risk Control Matrix and performing Test of Design and Test of Effectiveness (TOD/TOE).
  • Experience assessing financial systems leveraging SOX, FISCAM, or COBIT compliance frameworks.
  • Clear, concise, and effective verbal and written communication skills.
  • Project management skills for functioning in an unstructured matrix management environment.
  • Ability to work independently and meet deadlines for assigned tasks.
• Preferred
  • Experience leading financial IT audits and developing audit and security-related system documentation to reduce risk and meet control requirements.
  • CISSP or CISA certification.
  • Experience with Workday or Coupa.