Internal Auditor

M9 Solutions is seeking anInternal Auditorto work hybrid remote/on-site on a government contract for a client located in Tysons or Arlington, VA. An active Secret clearance is required.

Responsibilities

• Develop, maintain, and execute the Intra-governmental transactions and Intra-entity eliminations to timely and effectively achieve a downgrade to the Intra-governmental transactions and Intra-entity eliminations by its designated timeline (i.e., FY2027). This will involve updates to potentially include additional milestones/tasks as the downgrade effort progresses and marking milestones/tasks as closed as they are completed.
• Develop an Intra-governmental transactions and Intra-entity eliminations Process Cycle Memorandum (PCM), which will include an end-to-end summary of the Intra-governmental transactions and Intra-entity eliminations business process, key controls, IT General Controls (ITGCs) and IT Application Controls (ITACs), and Complementary User Entity Controls (CUECs). The development of this PCM will involve reviewing existing process documentation, Standard Operating Procedures (SOPs), and documented controls. Additionally, walkthroughs/observations will be performed over key business process stakeholders to ensure that there are no discrepancies between documented processes and the processes that are in place.
• Develop a Risk and Control Matrix (RACM) for the Intra-governmental transactions and Intra-entity elimination business process and related IT environment to initially identify risks, which include risks related to audit assertions (e.g., completeness and accuracy), inherent risks, and the potential risk of material misstatement to the financial statements. For identified control gaps or deficiencies, remediation strategies, which include recommendations to modify/develop controls, will be developed to mitigate the risk of material misstatement to the financial statements.
• Develop and perform Test of Design (ToD) and Test of Effectiveness (ToE) for newly developed controls, to include CUECs, which will mitigate the risks/control gaps identified through the completion of the RACM. Additionally, policies, manuals, and SOPs will be revised/developed to support the implementation of newly developed controls. This will also potentially require the development of training materials and the delivery of trainings for stakeholders that will be responsible for executing the newly developed controls.
• Collaborate with stakeholders to assist with the communication of the status and timeline for remediation activities that will result in the downgrade of the Intra-governmental transactions and Intra-entity eliminations. Collaboration will involve the communication of updated processes and controls, process documentation, and remediation. Collaboration with stakeholders will involve communicating dependencies such as the documentation of the end-to-end Intra-governmental transactions and Intra-entity elimination business process and the modification/creation of controls, which will be owned by those stakeholders, to mitigate the risk of material misstatement to financial statements.

Required Skills and Qualifications

• Active Secret security clearance.
• Must be available to work onsite two days per week in Tysons or Arlington, VA.
• 10+ years of overall relevant experience with 4+ years of federal experience.
• Master's degree in Computer Science, IT, Finance, or a related field.
• One of the following certifications: CPA, CIA, CISA, CGFM, CDFM, PMP, SAFe, or ITIL.
• Should possess a deep understanding of intra-governmental transactions, intra-entity eliminations, financial reporting, and internal controls. Experience in developing and reviewing process documentation, Standard Operating Procedures (SOPs), and Risk and Control Matrices (RACMs) is essential.
• Demonstrate strong project management abilities, including experience in developing and maintaining Integrated Project Plans (IPPs), managing timelines, and coordinating multiple stakeholders. Proficiency in tracking milestones, preparing presentation materials, and ensuring effective communication throughout the project lifecycle is crucial.
• Possess excellent analytical skills to identify risks, control gaps, and discrepancies between documented processes and actual practices. Experience in conducting walkthroughs, performing Tests of Design (ToD) and Tests of Effectiveness (ToE), and developing remediation strategies to address identified issues will be important for the successful execution of the project.