JOB OVERVIEW

Must possess demonstrated subject matter work expertise of 3 to 10 years in internal control matters. Duties include but are not limited to the ability to anticipate and effectively solve problems by analyzing their root causes and recognize key causal connections; Manage multiple work streams in a manner that effectively delivers results to the government; Provide insightful responses to government requests in a timely manner to ensure the delivery of the highest quality products; Engage in open, direct, candid, constructive, and regular exchanges of information between engagement team members and the government that ensures work activities are effective across teams and government.

REQUIREMENTS

• Demonstrated subject matter work expertise of 3 to 10 years in internal control matters
• Strong understanding of FMFIA, OMB Circular A-123 Appendix D, FMM, and federal financial management requirements.
• Familiarity with IT general controls, application controls, and Complementary User Entity Controls (CUECs).
• Knowledge of financial systems, IT environments, and risk assessment frameworks.
• Experience with fraud risk assessment, corrective action plans (CAPs), and continuous monitoring.
• Analytical Skills: Ability to anticipate, identify, and resolve problems by analyzing root causes and recognizing key causal connections.
• Project Management: Experience managing multiple work streams simultaneously to deliver results effectively and meet deadlines.
  Job Type: Contract
  Pay: From $60,000.00 per year
  Work Location: Hybrid remote in Washington, DC 2041

• Support OPM’s compliance with the Federal Managers’ Financial Integrity Act (FMFIA), OMB Circular A-123 Appendix D, and OPM Financial Management Manual (FMM).
• Develop, document, and maintain assessment schedules, project plans, and deliverables to support OPM’s annual assurance statement, audit readiness, and ongoing compliance efforts.
• Conduct internal control assessments (baseline and routine monitoring) of financial systems, including design (TOD) and operating effectiveness (TOE) testing, to ensure proper risk mitigation, compliance, and operational efficiency.
• Identify, document, and report control deficiencies in coordination with ICC leadership and process owners; prepare Deficiency Memoranda and perform validation and verification (V&V) procedures to confirm remediation.
• Perform the annual risk assessment of financial systems, assign risk ratings, and develop a three-year risk-based rotation plan for testing high-risk systems, including IT general controls (ITGCs), application controls, and Complementary User Entity Controls (CUECs).
• Document and maintain OPM’s financial information system environment, including system inventory, interconnections, ownership, risk level, and critical financial processes.
• Obtain and review SOC 1 reports/bridge letters, test CUECs, and document results including fraud risk assessment and business process application controls.
• Prepare and deliver summary memoranda, IT Summaries of Aggregated Deficiencies (IT SADs), and lessons learned reports, consolidating results for effective communication to stakeholders.
• Provide weekly progress check-ins, monthly written status reports, and monthly invoice reviews to ensure consistency with project deliverables and timelines.
• Prepare and deliver presentations, reports, and educational resources (guides, SOPs, white papers, FAQs) for OPM leadership, external parties, and training purposes.
• Provide ad-hoc technical and analytical support for compliance, risk assessments, special projects, and strategic initiatives as required.