Internal Review Specialist II

Internal Review Specialist II

ProSidian seeks an internal Review Specialist II located in Arlington, VA (or surrounding area) to support an engagement for Business Analysis and Management Support Services (BAMSS) on behalf of a Federal Government Agency. The ProSidian Engagement includes but is not limited to Management & Operations Consulting related to non-personal service to: provide competent leadership, and highly specialized support and technical guidance for the planning, development and execution of the entire Internal Control Review lifecycle. Serve as a technical expert for audit and internal control related activities with specialized experience in current audit and internal control benchmarks, practices and testing methods.

Perform internal reviews of controls surrounding The Client's Division of IT (DIT) policies, procedures, processes and industry benchmarks to determine efficient and effective operations and in such a manner as to provide a reasonable level of assurance of risk being mitigated. Ability to review documentation and perform assessments of current control and practices against policies and procedures. Develop test plans from current policies, circulars, procedures and industry standards. Demonstrate ability to conduct and participate in formal and informal audits/reviews at pre-determined points throughout the project life cycle. Ability to identify best practices, effect re-engineering, change management, business management techniques, continuous process improvement, root cause analysis, IT-planning, develop/recommend IT performance-based metrics, and organizational development activity. Possesses the ability to assess and apply multiple organizational, and management improvement techniques in a government environment.

Ensures all work products are complete, accurate and conform to Federal Government Agency standard. Has the ability to create, assess performance measurements and maintains a comprehensive knowledge of the IT industry, business processes and procedures. Has extensive experience in project management and other disciplines as described in an actual TA proposal. Has the ability to conduct process mapping sessions and identify key control points to be tested. Must be a Certified Information Technology Professional (CTP) and/or a Certified Information Systems Auditor (CISA) and/or Certified Internal Auditor (CIA).

The ideal Internal Review Specialist II has the appropriate skill sets, education, work experience and work quantity to successfully meet all the requirements of The ProSidian Client including all awarded TOs on behalf of The ProSidian Engagement Team.

A Master's Degree in either Management, Business Administration, Computer Science, Mathematics, Engineering or related discipline with five years of experience in management of enterprise projects similar in scope and or Bachelor's Degree in a related discipline with eight years of experience in the management of similar projects or programs. Minimum 10 Years of experience in IT Governance, Risk and Compliance (GRC), Policy and Standards development and implementation, IT and Information Security, Sarbanes-Oxley (SOX), compliance monitoring, internal control testing, operational risk management, GRC tools and internal/external auditing, strong customer relationship management and proven leadership skills. Good understanding of COSO, COBIT, ITIL, NIST, FISMA, A123, ISO 27000, SOX 404 and CFOA.

Proven track record of leading and managing risk assessments, reviews and audits, risk mitigations/acceptance plans and reporting. Internal Review Specialist II shall have the ability to provide guidance and direction for multiple enterprise programs in implementing business process development, business re-engineering, and strategic business projects. Internal Review Specialist II shall have the capability to manage programs of high complexity and to direct the completion of multiple projects within estimated time frames and resource constraints. Experience in GRC tool implementation of IT Controls, Risk Assessments, reviews, audits and third party management. Immense knowledge of designing, implementing and testing ITGC, application and InfoSec controls. Versatile team leader and team player with good communication, program/project management, Software Development Life Cycle, process/procedure, documentation and interpersonal skills.

Ability to identify best practices, effect re-engineering, change management, business management techniques, continuous process improvement, root cause analysis, IT-planning, develop/recommend IT performance-based metrics, and organizational development activity. Possesses the ability to assess and apply multiple organizational, and management improvement techniques in a government environment. Ensures all work products are complete, accurate and conform to FDIC standard.

Specialties: GRC Risk Assessments, Third party Management, SOX Testing, IT Audits, Control Self Assessments, Metrics, Vulnerability Management, Project Management, Business Continuity Plans, SDLC, GRC Implementation

Frameworks: COSO, COBIT, ITIL, NIST, ISO 27000, OCTAVE, PCI

Tools: BWise, IDEA, Clarity, Microsoft Project, Business Objects, MS Office

Certified Information Systems Auditor (CISA)

Certified in the Governance of Enterprise IT (CGEIT)

Certified in Risk and Information Systems Control (CRISC)

Ability To Serve As A Key Personnel Engagement Team Member. Personnel specified as Key Personnel are considered to be essential to the work ProSidian performs. Prior to diverting any key personnel to other programs, ProSidian makes special efforts to notify Engagement Team Leads and Client Representatives reasonably in advance with appropriate justification, including proposed substitutions or replacements, in sufficient detail to permit The Client to evaluate the impact on the work ProSidian is obligated to perform.

CORE COMPETENCIES Teamwork ability to foster teamwork collaboratively as a participant, and effectively as a team leader Leadership ability to guide and lead colleagues on projects and initiatives Business Acumen understanding and insight into how organizations perform, including business processes, data, systems, and people Communication ability to effectively communicate to stakeholders of all levels orally and in writing Motivation persistent in pursuit of quality and optimal client and company solutions Agility ability to quickly understand and transition between different projects, concepts, initiatives, or work streams Judgment exercises prudence and insight in decision-making process while mindful of other stakeholders and long-term ramifications Organization ability to manage projects and activity, and prioritize tasks

OTHER REQUIREMENTS Business Tools understanding and proficiency with business tools and technology, including Microsoft Office. The ideal candidate is advanced with Excel, Access, Outlook, PowerPoint and Word, and proficient with Adobe Acrobat, data analytic tools, and Visio with the ability to quickly learn other tools as necessary Commitment - to work with smart, interesting people with diverse backgrounds to solve the biggest challenges across private, public and social sectors Curiosity the ideal candidate exhibits an inquisitive nature and the ability to question the status quo among a community of people they enjoy and teams that work well together Humility exhibits grace in success and failure while doing meaningful work where skills have impact and make a difference Willingness - to constantly learn, share, and grow and to view the world as their classroom

At ProSidian, we invest in our employees to help them stay healthy and achieve work-life balance. Our team members receive a comprehensive benefits package that includes Competitive Compensation, Group Health Insurance Health Benefits, 401(k) Retirement Savings Plan Contributions, Vacation and Paid Time off (PTO) Benefits, Pre-Tax Payment Programs, Purchasing Discounts & Savings Plans, a ProSidian Employee & Contractor Referral Bonus Program, Performance Incentives, etc. Our comprehensive benefits package includes a medical, dental and vision plan. Our growing list of benefits currently include the following:

Competitive Compensation: Pay range begins in the competitive ranges with full Gold Level (Tier 1) Group Medical Benefits, Pretax Employee Benefit Plan, plus performance incentives Group Health Insurance Health Benefits: Group Health Insurance Including Medical, Dental And Vision Insurance: Contributions are deducted from pay on a Pretax basis - Employee and family coverage is available with employer contribution of 50% of Employee (only) premiums under the Health and Vision Plan through Blue Cross Blue Shield NC (Blue Options Medical Plan Code: PB07840 / Metallic Level: Gold - - bcbsnc.com?) and Dental Plan (Ameritas - 401(k) Retirement Savings Plan: 401(k) Retirement Savings Plans help you save for your retirement. Eligible employees can make before-tax contributions to the 401(k) Retirement Savings Plan to help you save for retirement. Contributions are deducted from pay on a pretax basis the employee can contribute up to $18k. A wide range of investment options are available with a personal financial planner available to assist you. Immediate 100% vesting of both your contribution and the ProSidian matching contribution. The Plan is a Safe Harbor 401(k) Retirement Savings Plan. ProSidian Consulting participates in a Basic Match: 4% of pay for participants who defer at least 5% of their pay. The Basic Match is structured as follows: 100% of the first 3% of pay that is contributed; and 50% of the next 2% of pay that is contributed. Vacation And Paid Time Off (PTO) Benefits: The flexibility of Paid Time Off (PTO) lets you set your own priorities. Eligible employees use PTO for vacation, a parent-teacher conference, a doctor's appointment, or any number of events in your life. Currently these benefits include Vacation/Sick days 2 weeks | Holidays - 10 Federal Government. Pre-Tax Payment Programs: Pre-Tax Payment Programs currently exist in the form of a Premium Only Plan (POP). These Plans offer a full Flexible Spending Account (FSA