External Auditor Consultant

VIVA USA Inc; Washington (District of Columbia); Hybrid; USD 120.000 - 170.000; Vollzeit

Zusammenfassung

VIVA USA Inc seeks an experienced IT compliance consultant in Washington, DC to support SOX, FISMA, and internal control reviews for financial systems.

You will evaluate cloud controls, develop Risk Control Matrices, prepare audit documentation, and advise on security and compliance policies. Hybrid schedule requires in-office presence, with at least 6 days per month on site. Strong communication and project management skills are essential to navigate a matrix organization.

Qualifikationen

• Five years of progressively responsible IT experience in auditing, security, or related roles.
• Experience with SOX, FISCAM, or COBIT assessments.
• Strong verbal and written communication; ability to work in a matrix environment.

Aufgaben

• Evaluate, develop, maintain, and update the technology compliance program.
• Advise the technology officers on compliance, information security, and internal controls.
• Prepare for yearly financial statement audit and SOX reviews.
• Develop documents for internal SOX or FISMA reviews.
• Design, test, and review controls for compliance and ensure proper documentation.
• Create audit and monitoring reports as directed.

Kenntnisse

Financial applications

SOC 1/2 controls

Audit leadership

Risk Control Matrix

TOD/TOE

SOX/FISCAM/COBIT

Communication skills

Project management

Independent work

CISSP/CISA

Workday/Coupa

Tools

SOX/COBIT tools

GRC tools

Workday/Coupa integration

Jobbeschreibung

Hybrid telework schedule (minimum 6 days/month in office)

BACKGROUND:

The Division of Information Technology Enterprise Services propose to engage two consultants to provide compliance and information security support to in preparation for annual Financial Statement Audits, internal SOX control reviews, financial system FISMA reviews, provide support in updating policies and procedures, and assist with ongoing compliance self-assessments.

REQUIREMENTS:

In addition, the candidate shall have demonstrated experience in the following:

• Experience with financial applications
• Experience with evaluating cloud internal controls reports, SOC-1 and SOC-2
• Simultaneously works on several complex assignments requiring analysis of control applicability and evaluation of control gaps for financial systems.
• Experience with leading financial IT audits and successfully developing audit and security related system documentation to reduce risk and meet control requirements desired.
• Experience in developing a Risk Control Matrix, Test of Design and Test of Effectiveness (TOD/TOE)
• Must have at least five years of progressively responsible experience in the information technology arena as an IT auditor, IT security analyst, IT manager, business analyst, system administrator or a combination of these.
• Possess clear, concise, and effective verbal and written communication and project management skills needed for functioning in an unstructured matrix management environment.
• Work independently and meet deadlines for assigned tasks
• Experience with assessing financial systems leveraging SOX, FISCAM, or COBIT Compliance strongly desired.
• CISSP or CISA certification strongly desired.
• Experience with Workday or Coupa a plus, but not required

KEY RESPONSIBILITIES

Participates in the process to evaluate, develop, maintain, and update the technology compliance program. Advises the technology support officer and technology managers on compliance, information security, and internal controls.

Prepares the technology departments for the yearly financial statement audit and SOX internal control reviews.

Assist in developing required documents in support of internal SOX or FISMA reviews.

Develop solutions with team members to minimize vulnerabilities.

Advises the technology officer of SOX and compliance issues and recommends solutions

Provides a weekly status report to the COR documenting concerns, issues, risks, and progress.

Recommends and helps implement GRC Tools to increase automation in the areas of compliance, auditing, and vulnerability detection for the branch.

Designs, tests and reviews controls for compliance and ensures proper documentation is recorded.

Creates audit and monitoring reports used by the team, as directed.

The External Auditor Consultant shall deliver, but not limited to, the following:

• Thoroughly assess and validate the SOX Risk Control Matrices (RCM’s) for identified systems of record against client policies. Document findings and recommendations.
• Crosswalk the SOX RCMs against the client Information Security Program (BISP) standards and procedures and document the results.
• Provide recommendations, develop action plans, and help implement capabilities to improve compliance and security practices.
• Document updates to SOX compliance related policies, processes, procedures, and/or standards as directed by the compliance team.

VIVA is an equal opportunity employer. All qualified applicants have an equal opportunity for placement, and all employees have an equal opportunity to develop on the job. This means that VIVA will not discriminate against any employee or qualified applicant on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status