External Audit Consultant

Accountabilities: You will provide specialized expertise in IT auditing, financial systems compliance, and internal control assessments, helping ensure that technology operations meet applicable security and regulatory requirements. Your responsibilities will include: Participate in evaluating, developing, maintaining, and updating technology compliance programs. Advise technology support officers and management teams on regulatory compliance, information security, and internal control requirements. Prepare technology departments for annual financial statement audits and SOX internal control reviews. Support the preparation of documentation required for internal SOX and FISMA assessments. Evaluate financial applications and cloud service internal controls reports, including SOC 1 and SOC 2 reports. Lead or support financial IT audits, identifying control gaps, assessing applicability, and recommending corrective actions. Develop, validate, and maintain Risk Control Matrices (RCMs), including Test of Design (TOD) and Test of Operating Effectiveness (TOE) documentation. Assess and validate SOX Risk Control Matrices for identified systems of record against applicable organizational policies. Cross-reference SOX Risk Control Matrices against information security program standards and procedures, documenting findings and recommendations. Design, test, and review internal controls to verify compliance and ensure appropriate supporting documentation is maintained. Identify system vulnerabilities and collaborate with technical teams to develop solutions that reduce security and compliance risks. Advise technology leadership on SOX and compliance issues and recommend appropriate remediation strategies. Recommend and support the implementation of Governance, Risk, and Compliance (GRC) tools to automate compliance monitoring, auditing, and vulnerability detection. Create audit, monitoring, and compliance reports to support management oversight and decision-making. Provide weekly status reports to the Contracting Officer's Representative (COR), highlighting progress, concerns, issues, and potential risks. Document updates to SOX-related policies, processes, procedures, and standards as directed by the compliance team. Develop action plans and help implement capabilities that strengthen internal controls, security practices, and regulatory compliance. Manage multiple complex assignments simultaneously while meeting established deadlines and project objectives. Requirements The ideal candidate is a detail-oriented IT audit and compliance professional with strong experience evaluating financial systems, assessing internal controls, and supporting complex technology environments. You should bring: U.S. citizenship is mandatory. At least 5 years of progressively responsible experience in information technology, including roles such as IT Auditor, IT Security Analyst, IT Manager, Business Analyst, System Administrator, or a combination of these. Experience working with financial applications and evaluating technology controls within financial systems. Knowledge of cloud internal controls reports, particularly SOC 1 and SOC 2. Demonstrated experience leading financial IT audits and preparing audit-related and security documentation. Experience developing and evaluating Risk Control Matrices (RCMs), Test of Design (TOD), and Test of Operating Effectiveness (TOE). Strong understanding of SOX, FISCAM, or COBIT compliance frameworks; experience assessing financial systems against these standards is highly desirable. Familiarity with FISMA requirements and information security control assessments. Experience identifying control gaps, evaluating risks, and developing effective remediation strategies. Strong knowledge of internal controls, IT governance, risk management, and regulatory compliance practices. Ability to assess complex technical environments and translate audit findings into clear recommendations. Excellent written and verbal communication skills, with the ability to communicate effectively with technical teams and senior stakeholders. Strong project management, organizational, and analytical skills. Ability to manage multiple assignments independently and meet deadlines in a matrix-management environment. Strong documentation and reporting capabilities. CISSP or CISA certification is strongly preferred. Experience with Workday or Coupa is an advantage but not required. Benefits Fully remote work arrangement. Option to work periodically on-site in Washington, DC. Competitive compensation based on experience, education, qualifications, and relevant skills. Comprehensive employee benefits package. Opportunity to support significant Federal Government technology and financial compliance initiatives. Exposure to complex IT audit, information security, governance, and risk management projects. Opportunities for professional development and long-term career growth within the technology and government services sectors.