Senior IT Auditor – FISMA & SOX Compliance (Hybrid)

System One, Inc.; Washington (District of Columbia); Hybrid; USD 90,000 - 130,000; Full time

Job summary

System One, Inc. in Washington DC is seeking an External Auditor Consultant (FISMA/SOX) to support compliance and information security for annual financial statement audits and SOX control reviews.

Hybrid schedule requires in-office presence, with citizenship and a federal background/credit check for Public Trust clearance. The role will lead audits, develop documentation, and implement controls across financial IT environments, leveraging COBIT, FISMA, and SOX standards in a matrix management

Qualifications

• Experience with financial applications.
• Experience with evaluating cloud internal controls reports, SOC-1 and SOC-2.
• Simultaneously works on several complex assignments requiring analysis of control applicability and evaluation of control gaps for financial systems.
• Experience with leading financial IT audits and successfully developing audit and security related system documentation to reduce risk and meet control requirements.
• Experience in developing a Risk Control Matrix, Test of Design and Test of Effectiveness (TOD/TOE)
• Must have at least five years of progressively responsible experience in the information technology arena as an IT auditor, IT security analyst, IT manager, business analyst, system administrator or a combination of these.
• Possess clear, concise, and effective verbal and written communication and project management skills.
• Work independently and meet deadlines for assigned tasks.
• Experience with assessing financial systems leveraging SOX, FISCAM, or COBIT Compliance strongly desired.
• CISSP or CISA certification strongly desired.
• Experience with Workday or Coupa a plus, but not required

Responsibilities

• Participates in the process to evaluate, develop, maintain, and update the technology compliance program. Advises the technology support officer and technology managers on compliance, information security, and internal controls.
• Prepares the technology departments for the yearly financial statement audit and SOX internal control reviews.
• Assist in developing required documents in support of internal SOX or FISMA reviews.
• Develop solutions with team members to minimize vulnerabilities.
• Advises the technology officer of SOX and compliance issues and recommends solutions
• Provides a weekly status report to the COR documenting concerns, issues, risks, and progress.
• Recommends and helps implement GRC Tools to increase automation in the areas of compliance, auditing, and vulnerability detection for the branch.
• Designs, tests and reviews controls for compliance and ensures proper documentation is recorded.
• Creates audit and monitoring reports used by the team, as directed.

Skills

IT auditing

Compliance & controls

SOX & FISMA

COBIT & TOD/TOE

Risk Control Matrix

Documentation & reporting

Project management

Communication skills

Cloud controls assessment

Multi-tasking

Tools

Workday

Coupa

Job description

System One, Inc. in Washington DC is seeking an External Auditor Consultant (FISMA/SOX) to support compliance and information security for annual financial statement audits and SOX control reviews.

Hybrid schedule requires in-office presence, with citizenship and a federal background/credit check for Public Trust clearance. The role will lead audits, develop documentation, and implement controls across financial IT environments, leveraging COBIT, FISMA, and SOX standards in a matrix management