IT SOX/FISMA Compliance Auditor

We are seeking an experienced IT SOX/FISMA Compliance Auditor to provide IT audit, information security, and compliance support for annual financial statement audits, SOX internal control reviews, FISMA assessments, and ongoing compliance initiatives. Help strengthen financial system controls, reduce risk, and maintain compliance with applicable policies, standards, and regulatory requirements.

Position Responsibilities

·        Support annual financial statement audits, SOX control reviews, and FISMA assessments.

·        Evaluate financial system controls, identify gaps, and recommend remediation strategies.

·        Develop and validate Risk Control Matrices (RCMs), Test of Design (TOD), and Test of Effectiveness (TOE) documentation.

·        Assess SOC 1 and SOC 2 reports and crosswalk SOX controls against information security policies and standards.

·        Develop and maintain audit documentation, compliance policies, procedures, and standards.

·        Recommend and implement improvements to governance, risk, and compliance (GRC) tools and processes.

·        Collaborate with stakeholders to address vulnerabilities, strengthen controls, and improve compliance practices.

·        Prepare audit and monitoring reports and provide weekly status updates on progress, risks, and issues.

Position Qualifications

·        At least 5 years of progressively responsible IT experience in auditing, information security, IT management, business analysis, or systems administration.

·        Experience with financial applications, IT audits, internal controls, and regulatory compliance.

·        Knowledge of SOX, FISMA, FISCAM, COBIT, and financial system control assessments.

·        Experience evaluating SOC 1 and SOC 2 reports and developing RCMs, TOD, and TOE documentation.

·        Strong analytical, problem-solving, project management, and written and verbal communication skills.

·        Ability to manage multiple complex assignments independently and meet deadlines in a matrixed environment.

·        CISSP or CISA certification strongly preferred.

·        Experience with Workday or Coupa is a plus.

___________________________________________________________________________

No Phone calls Please

Please apply with your resume in a word file including all your contact details