Sr. IT Auditor (Service Organization Controls/SOC experience)

Alexandria, VA

Full Time

Experienced

Lynch Consultants is seeking a Sr. IT Auditor with Service Organization Controls/SOC experience to support Information Technology (IT) audit engagements and Complementary User Entity Control (CUEC) assessments. Duties will include service provider identification and risk assessment, evaluation of service provider controls to address risks, completion of documentation and test of control design, development of test plans and completion of testing of control operating effectiveness, and development and implementation of corrective actions.

Only applicants who fully satisfy all required qualifications will be considered for further review.

Salary: $90,000 - $97,000/yr commensurate with experience

Work Location and Schedule:

This work is 100% remote, but candidates must be local to the National Capital Region (District of Columbia, Maryland, or Virginia) for potential onsite work in Alexandria, VA.

Required Qualifications – Must Have:

MUST have a Bachelor's or Master's degree in a Business-related field
MUST have an active Secret Clearance
MUST have 5+ years of experience with ITGC and SOC Audits in the federal space.
MUST have knowledge and able to provide Quality Assurance (QA) review of IT control documentation, test plans, and Key Supporting (KSD) packages prior to submission for audit or Statement of Assurance purposes.
MUST have knowledge of support testing of IT General Controls (ITGCs) which includes User Access Management (provisioning, de-provisioning, privileged access), Change Management, Configuration Management, System Interfaces, and Data Transfers.
MUST have experience with Internal Controls Over Financial Systems (ICOFS) - Develop test plans to validate internal controls are in place for ICOFS/Complementary User Entity (CUECs).

MUST understand A-123 Statement of Assurance IT requirements
MUST understand Service Organization Controls (SOC) and Complementary User Entity Control (CUEC) assessments and implementation.
MUST understand FISCAM, NIST 800-53, and Federal financial system controls.

Preferred Qualifications:

CPA (Certified Public Accountant)

CDFM, CGFM/DoD FM Certification

Skills and Job Duties:

Development and execution of ITGC test plans (Test of Design).
Conduct (ToE)/(Test of Effectiveness (ToE)) procedures, including walkthroughs, sampling and evidence validation.
Validate completeness and accuracy of IT control populations and samples used for testing.
Support Statement of Assurance (SoA) IT inputs, including identification of IT risks, mapping of IT controls to financial reporting objectives, and documentation of IT control ownership.
Assist in drafting SoA narratives and flowcharts related to IT systems, including control descriptions risk statements, and remediation status.
Review SOC 1/ SOC 2 reports to identify CUEC applicable to the DoW Agency and support mapping of SOC controls to internal DoW Agency IT controls.
Review SOC 1/ SOC 2 reports to identify CUEC applicable to the DoW Agency.
Support mapping of SOC controls to internal DoW Agency IT controls and assist in documenting reliance strategies.
Conduct Audit Engagement support including development, QA review, validation, and submission of IT and business process documentation in response to audit Prepared By Client (PBC) requests.
Review Notice of Findings and Recommendations (NFRs) and develop or recommend Corrective Action Plans (CAPs) to remediate deficiencies and weaknesses.
Monitor and assess the implementation and validation of CAPs.
Provide Risk Management and Remediation to include providing expertise, recommendations, and industry best practices to support continuous improvements and increased feedback throughout the Audit Engagement and Audit Remediation processes, to include guidance, business rules, and process workflows.
Provide Audit Remediation Data Management using information provided by stakeholders.
Perform timely uploads or updates to CAP-related documentation in the designated audit remediation tool and provide an update to customer management.
Perform data analytics to assess the risk of misstatement from CAPs that are not fully remediated.
Assess remediation testing results to determine sufficiency of remediation procedures.
Conduct a review of Statements of Assurance (SOA) for accuracy and completeness as it relates to ICOFS. This includes providing advice and performing reviews, assessments, and a gap analysis to Federal Information Systems Control Audit Manual (FISCAM) requirements and NIST 800-53 standards and controls.
Develop, update, and review Memorandums of Understanding (MOUs) with service providers to include CUEC roles and responsibilities.
Perform ITGC testing (access management, change management, Configuration).
Quality Assurance reviews of audit workpapers and control documentation.
Notice of Findings and Recommendations (NFRs), Corrective Action
Plans (CAPS), Test of Operating Effectiveness (TOE), Test of Design (TOD), and Service Organization Controls (SOC) Reports
Management of IT audit evidence repositories (SharePoint, Teams, etc.)

If you are a highly motivated individual with the ability to solve complex issues, take on new responsibilities, build relationships and think in unique and innovative ways, we are looking for you!

Why Join LC?  

At Lynch Consultants (LC), your career growth is unlimited. We offer a competitive compensation package, employer-supported 401(k), world-class health benefits, paid vacation and holidays, plus programs that support your well-being.

You’ll gain:

Competitive total compensation: Our starting salaries are competitive, and our total compensation package goes even further. You have the chance to earn performance and referral bonuses, plus a profit-sharing bonus available to eligible associates.

Flexible career architecture: We encourage growing in your own way, whether that be moving up, moving across, or staying at your current level while taking on new challenges.

Unlimited promotion opportunities: We don’t have a cap on advancement at Lynch. If you’re ready to take on more responsibility and leadership, the opportunity is there.

Your career, your choice: Your timeline. Your path. Your definition of success. Whether you want to sprint towards partnership, explore different service lines, or master your craft at your current level, we’re here to support you.

About Us:  

Lynch Consultants, LLC is an Equal Opportunity Employer. We are a premier Federal professional services firm where your work makes a real difference. We value purpose, growth, and impact, and we proudly support and encourage applications from U.S. military veterans.

Apply for this position

Required*

First Name*

Last Name*

Email Address*

Phone*

Address

Resume*

We've received your resume. Click here to update it.

Attach resume or Paste resume

Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or Paste resume

Paste your resume here or Attach resume file

This position is remote. However, we are seeking local candidates. Are you located in the National Capital Region (District of Columbia, Maryland, Virginia)?*

This federal position requires all employees to be U.S. citizens. Are you a U.S. Citizen?*

Do you have an active DoD Secret clearance?*

How many years of experience do you have in ITGC/SOC audit support?*

What is your highest level of education completed?*

The salary range for this position will not exceed $97,000. Does this compensation range align with your salary expectations?*

The following questions are entirely optional.

To comply with government Equal Employment Opportunity and/or Affirmative Action reporting regulations, we are requesting (but NOT requiring) that you enter this personal data. This information will not be used in connection with any employment decisions, and will be used solely as permitted by state and federal law. Your voluntary cooperation would be appreciated. Learn more.

Gender

Race/Ethnicity

Invitation for Job Applicants to Self-Identify as a U.S. Veteran

A “disabled veteran” is one of the following:
- a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
- a person who was discharged or released from active duty because of a service-connected disability.
A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran status

I IDENTIFY AS ONE OR MORE OF THE CLASSIFICATIONS OF PROTECTED VETERAN LISTED ABOVE
I AM NOT A PROTECTED VETERAN
I DON’T WISH TO ANSWER

Voluntary Self-Identification of Disability

Voluntary Self-Identification of Disability Form CC-305
OMB Control Number 1250-0005
Expires 05/31/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury

Please check one of the boxes below:

YES, I HAVE A DISABILITY, OR HAVE HAD ONE IN THE PAST NO, I DO NOT HAVE A DISABILITY AND HAVE NOT HAD ONE IN THE PAST I DO NOT WANT TO ANSWER

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

You must enter your name and date
Name	Date

Human Check*

Submit Application

Lynch Consultants is a Washington, DC- based firm specializing in premier management solutions for federal government clients at the forefront of strategy, program, and financial management.

Please review our openings and apply to the positions that match your qualifications and be aware that applicants must be authorized to work in the U.S. as a precondition of employment.

Thank you!

Sr. IT Auditor (Service Organization Controls/SOC experience)

Apply for this position

Lynch Consultants is a Washington, DC- based firm specializing in premier management solutions for federal government clients at the forefront of strategy, program, and financial management.

Please review our openings and apply to the positions that match your qualifications and be aware that applicants must be authorized to work in the U.S. as a precondition of employment. Thank you!

Sr. IT Auditor (Service Organization Controls/SOC experience)

Apply for this position

Please review our openings and apply to the positions that match your qualifications and be aware that applicants must be authorized to work in the U.S. as a precondition of employment.

Thank you!