SOX & FISMA Compliance Auditor Consultant

System One; Washington (District of Columbia); Hybrid; USD 90,000 - 130,000; Full time

Job summary

System One seeks an Intermediate External Auditor Consultant for the Washington, DC area. This hybrid role supports compliance and information security in readiness for annual financial statement audits, internal SOX control reviews, and FISMA assessments. U.S.

citizenship is required and a Public Trust clearance is preferred. Responsibilities include developing risk controls, testing design and effectiveness, updating policies, and delivering periodic audit reports.

Qualifications

• Must have at least five years of progressively responsible experience in IT as an IT Auditor/IT Security Analyst/IT Manager or related roles.
• Citizenship requirement and Public Trust eligibility are stated prerequisites.
• Experience with SOX, FISCAM, or COBIT compliance is strongly desired.

Responsibilities

• Evaluate, develop, maintain, and update the technology compliance program.
• Prepare departments for annual financial statement audits and SOX reviews.
• Assist in developing documents for internal SOX or FISMA reviews.
• Develop solutions with team members to minimize vulnerabilities.
• Advise on SOX/compliance issues and recommend solutions.
• Provide weekly status reports documenting concerns, risks, and progress.
• Recommend and help implement GRC tools to automate compliance, auditing, and vulnerability detection.
• Design, test, and review controls for compliance and proper documentation.
• Create audit and monitoring reports as directed.
• Assess and validate SOX Risk Control Matrices against policies; document findings.

Skills

Financial applications

SOC 1/2 reports

IT audits

Risk Control Matrix

TOD/TOE testing

Communication skills

Project management

Independent work

SOX/COBIT/FISCAM

CISSP/CISA

Workday/Coupa (nice to have)

Job description

System One seeks an Intermediate External Auditor Consultant for the Washington, DC area. This hybrid role supports compliance and information security in readiness for annual financial statement audits, internal SOX control reviews, and FISMA assessments. U.S.

citizenship is required and a Public Trust clearance is preferred. Responsibilities include developing risk controls, testing design and effectiveness, updating policies, and delivering periodic audit reports.