Intermediate External Auditor Consultant (FISMA, SOX)

Location: Washington, DC, United States; hybrid telework schedule with a minimum of 6 days per month in the office and on-site work at FRB locations. U.S. citizenship is required, and the ability to obtain Public Trust clearance is required.

Salary: $110,000–$120,000 per year.

Company

hirify.global delivers outsourced services and workforce solutions across North America, including technology and compliance support.

What you will do

• Evaluate, maintain, and update the technology compliance program while advising technology officers and managers on compliance, information security, and internal controls.
• Prepare technology departments for annual financial statement audits, SOX internal control reviews, and FISMA reviews.
• Develop audit, security, policy, procedure, and system documentation supporting compliance reviews.
• Design, test, review, and document controls; assess control gaps and recommend solutions to reduce vulnerabilities and risk.
• Assess and validate SOX Risk Control Matrices against Board policies and crosswalk them against Board Information Security Program standards and procedures.
• Develop action plans, support compliance improvements, implement GRC tools, and prepare audit, monitoring, and weekly status reports.

Requirements

• At least five years of progressively responsible information technology experience as an IT auditor, IT security analyst, IT manager, business analyst, system administrator, or combination of these roles.
• Experience with financial applications and financial systems.
• Experience evaluating cloud internal control reports, including SOC-1 and SOC-2.
• Experience developing Risk Control Matrices, Test of Design, and Test of Effectiveness.
• Ability to analyze control applicability and evaluate control gaps across several complex assignments.
• Clear, concise, and effective verbal and written communication and project management skills in an unstructured matrix management environment.
• Ability to work independently and meet assigned deadlines.
• U.S. citizenship and ability to obtain Public Trust clearance.

Nice to have

• Experience leading financial IT audits and developing audit and security-related system documentation.
• Experience assessing financial systems using SOX, FISCAM, or COBIT compliance frameworks.
• CISSP or CISA certification.
• Experience with Workday or Coupa.

Culture & Benefits

• Hybrid telework schedule combined with required office and on-site work in Washington, DC.
• W2 or C2C engagement options.
• Eligible employees may receive medical, dental, vision, spending account, life insurance, voluntary plan, and 401(k) benefits.
• Equal opportunity employment environment.

Hiring process

• Applications are accepted until November 6, 2026.