IT Risk and Compliance Professional

Two95 International Inc.; Washington (District of Columbia); On-site; USD 90,000 - 140,000; Full time

Job summary

Two95 International Inc. is seeking an IT Risk and Compliance Professional to support its IT risk program in Washington, DC. The role focuses on establishing ongoing monitoring of IT general controls relevant to financial reporting.

Responsibilities include executing test plans, evaluating results, and maintaining audit documentation, with emphasis on identifying control gaps and recommending improvements. A Bachelor's degree and 5+ years of IT audit experience are required.

Qualifications

• Bachelor's degree in accounting, accounting information systems or computer science.
• 5 or more years of IT internal/external audit experience (preferred in a public company).
• CISA certification with integrated audits experience.
• Familiarity with COSO, COBIT, and NIST frameworks.
• Strong communication and interpersonal skills.

Responsibilities

• Execute test plans to evaluate ITGC design and operating effectiveness.
• Evaluate test results to identify control gaps and improvements.
• Perform monitoring to ensure controls operate over time.
• Assist with risk assessment and recommending control improvements.
• Prepare lead sheets, audit documentation and working papers.
• Draft findings and communicate recommendations.

Skills

Interpersonal skills

Communication skills

SOX compliance experience

ITGC testing

Risk management

Education

Bachelor's degree in accounting, information systems or computer science

Tools

CISA certification

Job description

Title: IT Risk and Compliance Professional

Location: Washington, DC Duration: 6+ Months

Description

The IT risk and compliance or IT audit professional will support Client's IT Risk & Compliance team in its efforts to establish an ongoing monitoring program over its information technology general controls (ITGCs) pervasive to our financial reporting objectives. Responsibilities include:

• Executing test plans to evaluate the design and operating effectiveness of ITGCs
• Evaluating test results to identify control gaps and control improvement opportunities
• Perform monitoring activities to ensure that established controls continue to operate effectively over time
• Assist with assessing risks and recommending control improvements
• Prepare lead sheets, maintain audit documentation and working papers to support the conclusion reached
• Draft findings and communicate recommendations

Requirements

• Bachelor's degree in accounting, accounting information systems or computer science.
• 5 or more years of IT internal/external audit experience (internal audit or risk management experience with a public company is preferable)
• CISA certification
  • Experience performing integrated audits
  • Familiarity with the risk-based audit approach
  • Familiarity with industry frameworks (e.g. COSO, COBIT, NIST, etc.), best practices and methodologies
• Proven interpersonal skills
• Demonstrated ability to execute and deliver under challenging circumstances
• Excellent communication skills ? written and oral
• Strong hands-on experience with Sarbanes Oxley (SOX) compliance
• Strong ITGC testing experience