External Auditor Consultant (FISMA/SOX) | Washington, DC (Hybrid) -

Key Requirements:

• 5+ years of experience in IT auditing, IT security, compliance, or a related field.

• Experience with SOX, FISMA, FISCAM, or COBIT compliance.

• Knowledge of financial applications and financial systems audits.

• Experience reviewing SOC 1/SOC 2 reports and cloud internal controls.

• Hands-on experience with Risk Control Matrices (RCMs), Test of Design (TOD), and Test of Effectiveness (TOE).

• CISA or CISSP certification preferred.

• Workday or Coupa experience is a plus.

Key Responsibilities:

• Support annual financial statement audits and SOX internal control reviews.

• Evaluate and validate SOX Risk Control Matrices.

• Conduct control assessments and identify compliance gaps.

• Prepare and maintain audit documentation, policies, and procedures.

• Recommend improvements to information security and compliance practices.