Financial Audit Compliance Subject Matter Expert (SME) - Clearance Required

Overview

Seeking a Financial Audit Compliance SME experienced in Independent Public Accountant (IPA) Financial Statement Audits, Service Organization Controls (SOC) Type 1, Information Technology (IT) General Controls (ITGC), IT Application Controls (ITAC), and End to End Business Processes to support the maintenance and conversion of the Army Enterprise Systems Integration Program (AESIP) Hub and related Enterprise Resource Planning (ERP) modernization efforts. Principle responsibilities include serving as the financial statement audit readiness SME, coordinating formal and informal audit related tasker completion, developing, and implementing corrective action plans (CAPs), and supporting other audit related reviews with government organizations.

Note: Work location is client site, Fort Belvoir, VA. Telework will be acceptable with the requirement to visit client offices at Fort Belvoir, Virginia at least once per week.

Responsibilities

• Lead audit analysis projects, staying abreast of current efforts, sending reminders to ensure suspense dates are met, and advising government leadership of emerging issues so they can be resolved quickly.
• Apply knowledge of federal and industry related policies, standards, and requirements, to determine the applicability of them to system documentation, controls, and the risk management framework (RMF) overlay.
• Develop, coordinate, and execute Federal Information System Controls Audit Manual (FISCAM) control Test of Design (TOD) and Test of Effectiveness (TOE) walkthroughs in support of the Product Management Office (PMO).
• Ensure relevant audit controls are in place and applicable to the Internal Controls over Financial Reporting (ICOFR), the Federal Financial Management Improvement Act (FFMIA), and the Financial Management System Reporting (FMSR) controls.
• Develop ITGC descriptions and related End to End Business Process Controls, including Procure to Pay, Acquire to Retire, Order to Cash, and other related accounting processes.
• Develop and review key audit artifacts demonstrating processes, including standard operating procedures (SOPs), policies, swim lane diagrams, account management plans, error logging processes, and playbooks to provide evidence and attest related controls are in place.
• Support Governance, Risk and Compliance (GRC) implementation efforts within systems, utilizing knowledge of GRC tools and best practices by reviewing Critical Action (CA) and Segregation of Duty (SOD) Reports.
• Identify where and how audit readiness requirements are incorporated into policies, processes and procedures to support DoD and Federal compliance requirements such as the National Institute of Standards and Technology (NIST), the National Archive Administration (NARA), the DoD Instruction (DoDI) 5000.64 - Accountable Property System of Record (APSR), the DoD 7000.14-R Financial Management Regulation, the Army Regulation (AR) 25-1 Army Information Technology, and various Army logistics regulations.
• Review and evaluate risks, issues and draft notifications of findings and recommendations (NFRs) and coordinate with various teams in the development of remediation strategies across identified systems and associated with the Risk Management Framework (RMF).
• Manage the development and implementation of Corrective Action Plans (CAPs), Plan of Action and Milestones (POA&Ms), and NFR remediation plans from inception to closure to include updates to senior leaders.
• Utilize the Enterprise Mission Assurance Support Service (eMASS) to update POA&M documents, and other risk management tools such as, the Risk Management Integration and Certification (RMIC) tool, and the DoD Financial Improvement and Audit Readiness (FIAR) database when appropriate.
• Perform analyses and continuous financial compliance monitoring of IT business systems and business process controls to meet DoD, Federal, and Army regulations.
• Coordinate responses and artifacts to support requests from the Independent Public Accountant (IPA) audit firm(s) to include Provided by Client (PBC) lists, Meeting Request Lists (MRLs), samples, cybersecurity documents, and other questions related to the General Fund (GF) and Army Working Capital Fund (AWCF) audits.
• Coordinate, develop and maintain audit related lessons learned, meeting due outs, action items, decisions and status reports in a centralized location leveraging knowledge management best practices.
• Review audit reports from the Government Accountability Office (GAO), the Department of Defense Inspector General (DoDIG), and the Army Audit Agency (AAA) to determine the applicability to the system, related to IT controls and business process functionality.
• Provide guidance to leadership and respond to taskers from oversight entities in the Army and Department of Defense. 

Qu