P

Prosidian Consulting

Management and operations consulting firm

Internal Review Specialist 2

Internal Audit & ControlsConfirmed live in the last 24 hours
Full-timeArlington County, Arlington, VA, USANo salary listed

About the Job

Requirements

  • A Master's degree in Management, Business Administration, Computer Science, Mathematics, Engineering, or a related discipline with five years of experience managing enterprise projects of similar scope, or a Bachelor's degree in a related discipline with eight years of experience managing similar projects or programs.
  • At least 10 years of experience in IT Governance, Risk and Compliance, policy and standards development and implementation, IT and information security, Sarbanes-Oxley compliance, compliance monitoring, internal control testing, operational risk management, GRC tools, and internal or external auditing.
  • Must hold a Certified Information Technology Professional, Certified Information Systems Auditor, or Certified Internal Auditor certification.
  • Strong understanding of COSO, COBIT, ITIL, NIST, FISMA, A123, ISO 27000, SOX 404, and CFOA.
  • Experience implementing GRC tools for IT controls, risk assessments, reviews, audits, and third-party management.
  • Extensive knowledge of designing, implementing, and testing IT general controls, application controls, and information security controls.
  • Experience with software development life cycle, process and procedure documentation, and program or project management.
  • Ability to conduct process-mapping sessions and identify key control points for testing.
  • Ability to identify best practices and apply re-engineering, change management, business management techniques, continuous process improvement, root-cause analysis, IT planning, IT performance metrics, and organizational development.
  • Ability to assess and apply organizational and management improvement techniques in a government environment.
  • Ability to use Microsoft Office tools, including Excel, Access, Outlook, PowerPoint, and Word; proficiency with Adobe Acrobat, data analytics tools, and Visio; and ability to learn other tools.
  • Ability to serve as a key personnel engagement team member.

Responsibilities

  • Perform internal reviews of controls concerning the client's Division of IT policies, procedures, processes, and industry benchmarks to assess operational efficiency and effectiveness and provide reasonable assurance that risk is mitigated.
  • Review documentation and assess current controls and practices against policies and procedures.
  • Develop test plans based on policies, circulars, procedures, and industry standards.
  • Conduct and participate in formal and informal audits and reviews at predetermined points throughout the project life cycle.
  • Ensure work products are complete, accurate, and conform to Federal Government Agency standards.
  • Create and assess performance measurements and maintain knowledge of IT industry practices, business processes, and procedures.
  • Provide guidance and direction to multiple enterprise programs implementing business process development, business re-engineering, and strategic business projects.
  • Manage high-complexity programs and direct completion of multiple projects within estimated time frames and resource constraints.
  • Lead and manage risk assessments, reviews, audits, risk mitigation or acceptance plans, and reporting.
  • Notify engagement team leads and client representatives in advance of diverting key personnel to other programs, with justification and sufficient detail to evaluate proposed substitutions or replacements.

Desired Qualifications

  • Specialties include GRC risk assessments, third-party management, SOX testing, IT audits, control self-assessments, metrics, vulnerability management, project management, business continuity plans, software development life cycle, and GRC implementation.
  • Frameworks include COSO, COBIT, ITIL, NIST, ISO 27000, OCTAVE, and PCI.
  • Tools include BWise, IDEA, Clarity, Microsoft Project, Business Objects, and Microsoft Office.
  • Certified Information Systems Auditor certification.
  • Certified in the Governance of Enterprise IT certification.
  • Certified in Risk and Information Systems Control certification.

About the Company

Prosidian Consulting

Management and operations consulting firm

ProSidian Consulting is a management and operations consulting firm that helps private companies, Fortune 1000 enterprises, and government agencies solve problems and improve operations through tailored, industry-aligned services. It offers six enterprise practice areas: Risk Management, Energy & Sustainability, Compliance, Business Process, IT Effectiveness, and Human Capital, delivered by multidisciplinary teams across CONUS/OCONUS. The firm follows a structured approach to strategic solutions focused on growth, margin, and efficiency, aligning assets, processes, policies, and people to deliver value. With former Big 4 leadership and a nationwide/overseas footprint, its goal is to translate strategy into execution that boosts clients' return on invested capital and value delivered to customers.

Company size
11-50
Company stage
Not listed
Total funding
Not listed
Headquarters
Charlotte, NC
Founded
2008

Recently Posted Jobs

Explore more opportunities at Prosidian Consulting

See more jobs