External Auditor Consultant (FISMA, SOX)

The Evolvers Group; Washington; Hybrid; USD 90,000 - 130,000; Full time

Job summary

The Evolvers Group seeks an External Auditor Consultant (FISMA, SOX) to join our Washington, DC team on a hybrid schedule, with in-office and client-site work. You will prepare for annual financial statement audits, support SOX control reviews, and assist with FISMA assessments and policy updates.

Ideal candidates have 5+ years in IT auditing, strong SOX/FISMA experience, and familiarity with Workday or Coupa is a plus.

Qualifications

• Knowledge and skills outlined in Technical Services BOA, Section 3.4.2.1 Intermediate External Auditor Consultant (FISMA, SOX).
• Experience with financial applications and evaluating cloud internal controls reports (SOC-1 and SOC-2).
• Experience leading financial IT audits and developing audit and security documentation to reduce risk.

Responsibilities

• Evaluate, develop, maintain, and update technology compliance programs; advise on compliance, information security, and controls.
• Prepare departments for annual financial statement audits and SOX reviews.
• Develop required documents for SOX/FISMA reviews and implement automation in compliance, auditing, and vulnerability detection.

Skills

SOX Compliance

IT Audit

Risk Assessment

Communication Skills

Project Management

Independent Work

Education

CISA Certification

CISSP Certification

Bachelors in IT/IS

Tools

Workday

Coupa

SOX GRC Tools

SOC 1/2 Reports Tools

Job description

Constant learning and evolution is a way of life at Evolvers. We are always looking for passionate individuals that are ready to evolve in tandem with our team, defining and re-defining each facet of their career life at Evolvers. Our professionals are rewarded for their contributions to our clients, our culture and the overall quest for excellence. We view each of our professionals as a catalyst for growth, for Evolvers, our clients, and for the industry.

Role: External Auditor Consultant (FISMA, SOX)Work Location: Washington, DC 20036.Contract: long term contractNOTE: Hybrid telework schedule (minimum 6 days/month in office), includes telework and on-site at Client location (unless directed otherwise)The Division of Information Technology Enterprise Services propose to engage two consultants to provide compliance and information security support to in preparation for annual Financial Statement Audits, internal SOX control reviews, financial system FISMA reviews, provide support in updating policies and procedures, and assist with ongoing compliance self-assessments.

Responsibilities

• Participates in the process to evaluate, develop, maintain, and update the technology compliance program. Advises the technology support officer and technology managers on compliance, information security, and internal controls.
• Prepares the technology departments for the yearly financial statement audit and SOX internal control reviews.
• Assist in developing required documents in support of internal SOX or FISMA reviews.
• Develop solutions with team members to minimize vulnerabilities.
• Advises the technology officer of SOX and compliance issues and recommends solutions
• Provides a weekly status report to the COR documenting concerns, issues, risks, and progress.
• Recommends and helps implement GRC Tools to increase automation in the areas of compliance, auditing, and vulnerability detection for the branch.
• Designs, tests and reviews controls for compliance and ensures proper documentation is recorded.
• Creates audit and monitoring reports used by the team, as directed.
• The External Auditor Consultant shall deliver, but not limited to, the following:
• Thoroughly assess and validate the SOX Risk Control Matrices (RCM’s) for identified systems of record against Board policies. Document findings and recommendations.
• Crosswalk the SOX RCMs against the Board Information Security Program (BISP) standards and procedures and document the results.
• Provide recommendations, develop action plans, and help implement capabilities to improve compliance and security practices.
• Document updates to SOX compliance related policies, processes, procedures, and/or standards as directed by the compliance team.

Qualifications

• The candidate shall possess the knowledge and skills set forth in the Technical Services BOA, Section 3.4.2.1 Intermediate External Auditor Consultant (FISMA, SOX).
• In addition, the candidate shall have demonstrated experience in the following:
• Experience with financial applications
• Experience with evaluating cloud internal controls reports, SOC-1 and SOC-2
• Simultaneously works on several complex assignments requiring analysis of control applicability and evaluation of control gaps for financial systems.
• Experience with leading financial IT audits and successfully developing audit and security related system documentation to reduce risk and meet control requirements desired.
• Experience in developing a Risk Control Matrix, Test of Design and Test of Effectiveness (TOD/TOE)
• Must have at least five years of progressively responsible experience in the information technology arena as an IT auditor, IT security analyst, IT manager, business analyst, system administrator or a combination of these.
• Possess clear, concise, and effective verbal and written communication and project management skills needed for functioning in an unstructured matrix management environment.
• Work independently and meet deadlines for assigned tasks
• Experience with assessing financial systems leveraging SOX, FISCAM, or COBIT Compliance strongly desired.
• CISSP or CISA certification strongly desired.
• Experience with Workday or Coupa a plus, but not required