External Auditor Consultant

Ampcus, Inc; Washington (District of Columbia); Hybrid; USD 90,000 - 140,000; Full time

Job summary

A consulting firm in Washington, DC is seeking an External Auditor Consultant to evaluate technology compliance and support financial audits. The ideal candidate has at least five years of relevant experience in IT auditing and strong communication skills. Responsibilities include preparing for annual audits, developing compliance documents, and advising on technology solutions. This hybrid role requires expertise in financial applications, SOX compliance, and experience with tools like Splunk. Competitive benefits and an equal opportunity environment offered.

Qualifications

• Five years of experience in IT auditing or security roles.
• CISSP or CISA certification is strongly desired.
• Must demonstrate excellent verbal and written communication skills.
• Ability to work in an unstructured matrix environment and meet deadlines.
• Strong verbal and written communication.

Responsibilities

• Evaluate and update technology compliance programs.
• Prepare for yearly financial audits and SOX reviews.
• Develop documents for internal compliance reviews.
• Advises on SOX and compliance issues.
• Perform weekly Splunk/audit log reviews.
• Provide weekly status reports documenting risks and progress.
• Recommend and implement GRC tools to improve automation.
• Perform weekly Splunk/audit log reviews.
• Evaluate documentation to meet compliance requirements.
• Support governance and risk management activities.
• Design, test, and review controls for compliance.
• Create audit and monitoring reports.

Skills

Financial applications experience

Cloud internal controls evaluation

Control gap analysis

System audit log reviews

NIST 800-53 controls assessment

Communication skills

IT systems assessment for compliance

Risk Control Matrix development

CISSP or CISA certification

Workday or Coupa experience

Education

5+ years in IT audit or security

CISA

Tools

Splunk

SOX, FISCAM, COBIT, FISMA compliance tools

Job description

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: External Auditor Consultant

Location(s): Washington, DC (Hybrid)

Description:

• Experience with financial applications
• Experience with evaluating cloud internal controls reports, SOC-1 and SOC-2
• Simultaneously works on several complex assignments requiring analysis of control applicability and evaluation of control gaps for financial systems.
• Experience with supporting financial IT audits and successfully developing audit and security related system documentation to reduce risk and meet control requirements desired.
• Experience with performing system audit log reviews via Splunk tool
• Experience assessing and evaluating NIST 800-53 controls
• Experience in developing a Risk Control Matrix, Test of Design and Test of Effectiveness (TOD/TOE)
• Must have at least five years of progressively responsible experience in the information technology arena as an IT auditor, IT security analyst, IT manager, business analyst, system administrator or a combination of these.
• Possess clear, concise, and effective verbal and written communication and project management skills needed for functioning in an unstructured matrix management environment.
• Work independently and meet deadlines for assigned tasks
• Experience with assessing IT systems leveraging SOX, FISCAM, COBIT, or FISMA Compliance strongly desired.
• CISSP or CISA certification strongly desired.
• Experience with Workday or Coupa a plus, but not required.

KEY RESPONSIBILITIES

• Participates in the process to evaluate, develop, maintain, and update the technology compliance program. Advises the technology support officer and technology managers on compliance, information security, and internal controls.
• Prepares the technology departments for the yearly financial statement audit and SOX internal control reviews.
• Assist in developing required documents in support of internal SOX or FISMA reviews.
• Develop solutions with team members to minimize vulnerabilities.
• Advises the technology officer of SOX and compliance issues and recommends solutions
• Provides a weekly status report to the COR documenting concerns, issues, risks, and progress.
• Recommends and helps implement GRC Tools to increase automation in the areas of compliance, auditing, and vulnerability detection for the branch.
• Perform weekly Splunk/audit log reviews and report any anomalies
• Evaluate system documentation to meet compliance requirements
• Assists with building governance and risk management tasks and activities for the team and management review
• Designs, tests and reviews controls for compliance and ensures proper documentation is recorded.
• Creates audit and monitoring reports used by the team, as directed.

The External Auditor Consultant shall deliver, but not limited to, the following:

• Thoroughly assess and validate the SOX Risk Control Matrices (RCM's) for identified systems of record against Board policies. Document findings and recommendations.
• Crosswalk the SOX RCMs against the TS/ Board Information Security Program (BISP) standards and procedures and document the results.
• Provide recommendations, develop action plans, and help implement capabilities to improve compliance and security practices.
• Document updates to compliance related policies, processes, procedures, and/or standards as directed by the compliance team.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.