Financial Audit Compliance Subject Matter Expert (SME) - Clearance Required
Full Time
Overview
Seeking a Financial Audit Compliance SME experienced in Independent Public Accountant (IPA) Financial Statement Audits, Service Organization Controls (SOC) Type 1, Information Technology (IT) General Controls (ITGC), IT Application Controls (ITAC), and End to End Business Processes to support the maintenance and conversion of the Army Enterprise Systems Integration Program (AESIP) Hub and related Enterprise Resource Planning (ERP) modernization efforts. Principle responsibilities include serving as the financial statement audit readiness SME, coordinating formal and informal audit related tasker completion, developing, and implementing corrective action plans (CAPs), and supporting other audit related reviews with government organizations.
Note: Work location is client site, Fort Belvoir, VA. Telework will be acceptable with the requirement to visit client offices at Fort Belvoir, Virginia at least once per week.
Responsibilities
- Lead audit analysis projects, staying abreast of current efforts, sending reminders to ensure suspense dates are met, and advising government leadership of emerging issues so they can be resolved quickly.
- Apply knowledge of federal and industry related policies, standards, and requirements, to determine the applicability of them to system documentation, controls, and the risk management framework (RMF) overlay.
- Develop, coordinate, and execute Federal Information System Controls Audit Manual (FISCAM) control Test of Design (TOD) and Test of Effectiveness (TOE) walkthroughs in support of the Product Management Office (PMO).
- Ensure relevant audit controls are in place and applicable to the Internal Controls over Financial Reporting (ICOFR), the Federal Financial Management Improvement Act (FFMIA), and the Financial Management System Reporting (FMSR) controls.
- Develop ITGC descriptions and related End to End Business Process Controls, including Procure to Pay, Acquire to Retire, Order to Cash, and other related accounting processes.
- Develop and review key audit artifacts demonstrating processes, including standard operating procedures (SOPs), policies, swim lane diagrams, account management plans, error logging processes, and playbooks to provide evidence and attest related controls are in place.
- Support Governance, Risk and Compliance (GRC) implementation efforts within systems, utilizing knowledge of GRC tools and best practices by reviewing Critical Action (CA) and Segregation of Duty (SOD) Reports.
- Identify where and how audit readiness requirements are incorporated into policies, processes and procedures to support DoD and Federal compliance requirements such as the National Institute of Standards and Technology (NIST), the National Archive Administration (NARA), the DoD Instruction (DoDI) 5000.64 - Accountable Property System of Record (APSR), the DoD 7000.14-R Financial Management Regulation, the Army Regulation (AR) 25-1 Army Information Technology, and various Army logistics regulations.
- Review and evaluate risks, issues and draft notifications of findings and recommendations (NFRs) and coordinate with various teams in the development of remediation strategies across identified systems and associated with the Risk Management Framework (RMF).
- Manage the development and implementation of Corrective Action Plans (CAPs), Plan of Action and Milestones (POA&Ms), and NFR remediation plans from inception to closure to include updates to senior leaders.
- Utilize the Enterprise Mission Assurance Support Service (eMASS) to update POA&M documents, and other risk management tools such as, the Risk Management Integration and Certification (RMIC) tool, and the DoD Financial Improvement and Audit Readiness (FIAR) database when appropriate.
- Perform analyses and continuous financial compliance monitoring of IT business systems and business process controls to meet DoD, Federal, and Army regulations.
- Coordinate responses and artifacts to support requests from the Independent Public Accountant (IPA) audit firm(s) to include Provided by Client (PBC) lists, Meeting Request Lists (MRLs), samples, cybersecurity documents, and other questions related to the General Fund (GF) and Army Working Capital Fund (AWCF) audits.
- Coordinate, develop and maintain audit related lessons learned, meeting due outs, action items, decisions and status reports in a centralized location leveraging knowledge management best practices.
- Review audit reports from the Government Accountability Office (GAO), the Department of Defense Inspector General (DoDIG), and the Army Audit Agency (AAA) to determine the applicability to the system, related to IT controls and business process functionality.
- Provide guidance to leadership and respond to taskers from oversight entities in the Army and Department of Defense.
Qualifications
Required:
- Active Secret Security Clearance.
- Bachelor’s degree in business management, information systems, accounting, or similar discipline.
- 12 – 15 years’ commercial, federal or DoD experience working in accounting, audit readiness, internal control, Business Enterprise Architecture (BEA) end to end (E2E), or program management.
- Familiarity with U.S. Army financial and non-financial feeder systems.
- Working knowledge of policies, standards and requirements including but not limited to the Federal Information System Controls Audit Manual (FISCAM), the Federal Financial Management System Requirements (FMSR), the Federal Financial Management Information Act (FFMIA) the Standard Line of Accounting (SLOA), the Standard Financial Information Structure (SFIS), and the Statement of Federal Financial Accounting Standards (SFFAS).
- Excellent communication skills, both verbal and written, excellent organizational skills, the ability to establish and maintain working relationships with internal and external stakeholders, must have the ability to work independently and take a proactive role.
- Familiarity with Army tools such as the Army Financial Audit Collaborative Tool (A-FACT), Advana, the Army Portfolio Management Solution (APMS), the Army Records Information Management System (ARIMS) and the Army Enterprise Task Management Software Solution (ETMS2).
- Experience and proficiency with MS Office 365 Suite (Excel, PowerPoint, Word, Teams).
Desired:
- Master’s Degree.
- Relevant certification such as Certified Defense Financial Manager (CDFM), Certified Information Systems Auditor (CISA), Certified Government Financial Manager (CGFM), Certified Internal Auditor (CIA), or Certified Public Accountant (CPA).
- Agile certifications.
- Project Management Professional (PMP) certification.
- Familiarity with the following tools: Army Financial Audit Collaborative Tool (A-FACT), Enterprise Mission Assurance Support Service (eMASS), ServiceNow, and Enterprise Task Management Software Solution (ETMS2).