Intermediate External Auditor Consultant (FISMA, SOX)
Washington, District Of Columbia
Experience: 0
Category: Information Technology
Contractor Work Model: Hybrid
Brand: System One
Compensation Range: 110000.00 - 120000.00 Per Year
Job ID: 382380
Date Posted: 10/23/2026
Shortcut: http://jobs.systemone.com/x9ro7y
Intermediate External Auditor Consultant (FISMA, SOX)
Place of Performance: Washington, DC – Hybrid telework schedule (minimum 6 days/month in office), includes telework and on-site at FRB locations, Washington, DC
Per Federal contract U.S. citizenship is required
Must be able to obtain Public Trust clearance
W2 or C2C
Application Deadline: 11/06
The Division of Information Technology Enterprise Services propose to engage two consultants to provide compliance and information security support to in preparation for annual Financial Statement Audits, internal SOX control reviews, financial system FISMA reviews, provide support in updating policies and procedures, and assist with ongoing compliance self-assessments.
In addition, the candidate shall have demonstrated experience in the following:
• Experience with financial applications
• Experience with evaluating cloud internal controls reports, SOC-1 and SOC-2
• Simultaneously works on several complex assignments requiring analysis of control applicability and evaluation of control gaps for financial systems.
• Experience with leading financial IT audits and successfully developing audit and security related system documentation to reduce risk and meet control requirements desired.
• Experience in developing a Risk Control Matrix, Test of Design and Test of Effectiveness (TOD/TOE)
• Must have at least five years of progressively responsible experience in the information technology arena as an IT auditor, IT security analyst, IT manager, business analyst, system administrator or a combination of these.
• Possess clear, concise, and effective verbal and written communication and project management skills needed for functioning in an unstructured matrix management environment.
• Work independently and meet deadlines for assigned tasks
• Experience with assessing financial systems leveraging SOX, FISCAM, or COBIT Compliance strongly desired.
• CISSP or CISA certification strongly desired.
• Experience with Workday or Coupa a plus, but not required
KEY RESPONSIBILITIES:
• Participates in the process to evaluate, develop, maintain, and update the technology compliance program. Advises the technology support officer and technology managers on compliance, information security, and internal controls.
• Prepares the technology departments for the yearly financial statement audit and SOX internal control reviews.
• Assist in developing required documents in support of internal SOX or FISMA reviews.
• Develop solutions with team members to minimize vulnerabilities.
• Advises the technology officer of SOX and compliance issues and recommends solutions
• Provides a weekly status report to the COR documenting concerns, issues, risks, and progress.
• Recommends and helps implement GRC Tools to increase automation in the areas of compliance, auditing, and vulnerability detection for the branch.
• Designs, tests and reviews controls for compliance and ensures proper documentation is recorded.
• Creates audit and monitoring reports used by the team, as directed.
The External Auditor Consultant shall deliver, but not limited to, the following:
• Thoroughly assess and validate the SOX Risk Control Matrices (RCM’s) for identified systems of record against Board policies. Document findings and recommendations.
• Crosswalk the SOX RCMs against the Board Information Security Program (BISP) standards and procedures and document the results.
• Provide recommendations, develop action plans, and help implement capabilities to improve compliance and security practices.
• Document updates to SOX compliance related policies, processes, procedures, and/or standards as directed by the compliance team.
#M1
#LI-VH1
#LI-GW1
Ref: #851-Rockville-S1
-
Senior Consultant
REMOTE , Virginia
Senior Consultant, Financial Services Model Development and Risk Analytics Location: Remote, United States Work Model: Fully remote, supporting Eastern Time business hours Job Type: Contract-to-hire Duration: Initial six-month contract with potential c...
Date Posted: 10/06/2026 Recommended
-
ServiceNow SPM Technical Consultant
x, Virginia
Job Title: ServiceNow SPM/Technical Consultant Job Type: 2 + year contract Work Model: Remote EST Clearance: Must be able to obtain Secret Clearance Our client is seeking an experienced ServiceNow Strategic Portfolio Management (SPM) Technical Consulta...
Date Posted: 10/22/2026 Recommended
-
Product Manager
Lafayette, Louisiana
Job Title: Product Manager Duration: Full Time / Permanent Position Location: Lafayette, LA, Knoxville, TN, Birmingham, AL Work Mode: 5 Days Onsite Position Description Systemone is seeking a Product Manager to own and evolve the compliance framework f...
Date Posted: 10/22/2026 Recommended
-
Unix/Linux Administrator
Washington DC, Maryland
Senior UNIX Linux Systems Engineer Washington, DC Hybrid – On-Site 2 days per week Hourly Rate: $75/hr. W2 Benefits Available Conversion Salary: Up to $150,000 annually, plus benefits Federal End Customer – US Citizenship Required Clearance: Public Tru...
Date Posted: 09/09/2026 Recommended
-
Senior Enterprise Data Privacy Analyst
Merrifield, VA
Job Title: Senior Enterprise Privacy Governance and Risk Management Analyst Location: Vienna, VA Work Schedule: Hybrid, onsite 3 days a week Pay Rate: Open to W2 and established 1099's (no c2c) Position Type: Multiyear Contract We are currently seeking...
Date Posted: 08/12/2026 Recommended
-
Desktop Governance Analyst
Vienna, Virginia
Job Title: Desktop Governance Analyst Location: Vienna, VA Type: Contract Work Model: Hybrid – onsite and remote Responsibilities Support governance, risk, and compliance activities focused on elevated access controls, audit readiness, remediation supp...
Date Posted: 08/13/2026 Recommended
-
Senior Vulnerability Management Analyst
Knoxville, Tennessee
Job Title: Senior Vulnerability Management Analyst Job Category: Cyber Security Job Type: Permanent Full Time Location: Lafayette, LA | Knoxville, TN | Columbia, SC | Birmingham, AL Position Description seeking a Senior Vulnerability Management Analyst...
Date Posted: 09/19/2026 Recommended
-
Senior Vulnerability Management Analyst
Knoxville, Tennessee
Job Title: Senior Vulnerability Management Analyst Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk manage...
Date Posted: 09/25/2026 Recommended
-
Senior Vulnerability Management Analyst
Birmingham, Alabama
Job Title: Senior Vulnerability Management Analyst Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk manage...
Date Posted: 10/06/2026 Recommended
-
Senior Vulnerability Management Analyst
Birmingham, Alabama
Job Title: Senior Vulnerability Management Analyst Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk manage...
Date Posted: 09/18/2026 Recommended
-
Senior Vulnerability Management Analyst
Knoxville, Tennessee
Job Title: Senior Vulnerability Management Analyst Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk manage...
Date Posted: 09/18/2026 Recommended
-
Senior Vulnerability Management Analyst
Columbia, South Carolina
Job Title: Senior Vulnerability Management Analyst Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk manage...
Date Posted: 09/18/2026 Recommended
-
Senior Vulnerability Management Analyst
Lafayette, Louisiana
Job Title: Senior Vulnerability Management Analyst Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk manage...
Date Posted: 09/18/2026 Recommended
-
Technical Risk Analyst
Vienna, VA
Technical Risk Analyst Location: remote Pay Rate: Open to Both C2C and W2 options Position Type: Contract Basic Purpose This role supports the Security Second Line of Defense (2LOD) Issue Management function by providing independent oversight, effectiv...
Date Posted: 10/13/2026 Recommended
-
Microsoft Endpoint & Workspace ONE Specialist
Plano, Texas
Job Title: Microsoft Endpoint & Workspace ONE Specialist Location: Reston, VA or Plano, TX Job Type: Permanent Full Time Seeking a Microsoft Endpoint & Workspace ONE Specialist? to support a large-scale enterprise environment within a cloud first infra...
Date Posted: 08/28/2026 Recommended
-
Senior Information Protection & AI Security Engineer
Birmingham, Alabama
Job Title: Senior Information Protection & AI Security Engineer Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Information Protection & AI Security Engineer to support enterprise ...
Date Posted: 09/18/2026 Recommended
-
Senior Information Protection & AI Security Engineer
Knoxville, Tennessee
Job Title: Senior Information Protection & AI Security Engineer Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Information Protection & AI Security Engineer to support enterprise ...
Date Posted: 09/18/2026 Recommended
-
Senior Information Protection & AI Security Engineer
Lafayette, Louisiana
Job Title: Senior Information Protection & AI Security Engineer Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Information Protection & AI Security Engineer to support enterprise ...
Date Posted: 09/18/2026 Recommended
-
Senior Information Protection & AI Security Engineer
Columbia, South Carolina
Job Title: Senior Information Protection & AI Security Engineer Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Information Protection & AI Security Engineer to support enterprise ...
Date Posted: 09/18/2026 Recommended
-
AWS Cloud Security Architect
Knoxville, Tennessee
Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite – onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud en...
Date Posted: 09/12/2026 Recommended
-
AWS Cloud Security Architect
Birmingham, Alabama
Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite – onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud en...
Date Posted: 08/31/2026 Recommended
-
AWS Cloud Security Architect
Columbia, South Carolina
Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite – onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud en...
Date Posted: 08/31/2026 Recommended
-
AWS Cloud Security Architect
Knoxville , Tennessee
Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite – onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud en...
Date Posted: 08/31/2026 Recommended
-
AWS Cloud Security Architect
Plano, Texas
Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite – onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud en...
Date Posted: 08/31/2026 Recommended
-
AWS Cloud Security Architect
Lafayette, Louisiana
Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite – onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud en...
Date Posted: 08/31/2026 Recommended
-
AWS Cloud Security Architect
Reston, Virginia
Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite – onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud en...
Date Posted: 08/31/2026 Recommended
-
AWS Cloud Security Architect
Birmingham, Alabama
Job Title: AWS Cloud Security Architect Location: Plano, TX/Reston, VA/Columbia, SC/Knoxville, TN/Lafayette, LA/Birmingham, AL Work Model: Onsite – onsite Responsibilities Provide security architecture guidance for enterprise applications, AWS cloud en...
Date Posted: 09/12/2026 Recommended
-
AWS Application Security Analyst
Knoxville , Tennessee
AWS Application Security Analyst * Job Title: AWS Application Security Analyst * Job Category: Software Development/ Engineering Job Type: Permanent Full Time Location: Various, , United States No.Openings: 1 Description: AWS Application Security Analy...
Date Posted: 09/07/2026 Recommended
-
Organizational Change Management Consultant
Columbia, South Carolina
Job Title: Organizational Change Management Consultant Location: Remote, United States Type: Full-time Compensation: Not specified Responsibilities Build or help build change management deliverables and activities to a business ready standard Work with...
Date Posted: 09/28/2026 Recommended
-
Organizational Change Management Consultant
Columbia, South Carolina
Job Title: Organizational Change Management Consultant Location: Remote, United States Type: Full-time Compensation: Not specified Responsibilities Build or help build change management deliverables and activities to a business ready standard Work with...
Date Posted: 09/28/2026 Recommended
⚠️ Protecting Job Seekers from Identity Scams
At System One, your privacy and security are important to us. As job-related scams continue to target job seekers, we want to help you recognize and avoid common recruitment fraud. Identity theft scams often involve individuals, also known as "scammers," posing as recruiters or employers to obtain sensitive personal information, such as Social Security numbers, bank account details, or copies of driver’s licenses, with the goal of stealing identities, accessing financial accounts, or creating fraudulent accounts in a victim’s name.