This is a 6-month contract role supporting external audit and compliance activities for the Division of Information Technology Enterprise Services. The position is hybrid, requiring approximately 6 days per month on-site in Manhattan, New York.
Responsibilities
Participate in evaluating, developing, maintaining, and updating the technology compliance program.
Advise technology support officers and technology managers on compliance, information security, and internal controls.
Prepare technology departments for yearly financial statement audits and SOX internal control reviews.
Assist in developing required documentation in support of internal SOX or FISMA reviews.
Develop solutions with team members to minimize vulnerabilities.
Advise the technology officer of SOX and compliance issues and recommend solutions.
Provide weekly status reports to the Contracting Officer's Representative documenting concerns, issues, risks, and progress.
Recommend and help implement GRC tools to increase automation in compliance, auditing, and vulnerability detection.
Design, test, and review controls for compliance and ensure proper documentation is recorded.
Create audit and monitoring reports as directed.
Qualifications
Required
At least five years of progressively responsible experience in the information technology arena as an IT auditor, IT security analyst, IT manager, business analyst, system administrator, or a combination of these.
Show the full description
Demonstrated experience with financial applications.
Experience evaluating cloud internal controls reports, including SOC-1 and SOC-2 reports.
Experience managing several complex assignments requiring analysis of control applicability and evaluation of control gaps for financial systems.
Experience developing a Risk Control Matrix and performing Test of Design and Test of Effectiveness (TOD/TOE).
Experience assessing financial systems leveraging SOX, FISCAM, or COBIT compliance frameworks.
Clear, concise, and effective verbal and written communication skills.
Project management skills for functioning in an unstructured matrix management environment.
Ability to work independently and meet deadlines for assigned tasks.
Preferred
Experience leading financial IT audits and developing audit and security-related system documentation to reduce risk and meet control requirements.
CISSP or CISA certification.
Experience with Workday or Coupa.
