Hybrid SOD Business Analyst

at BizFirst LLC

• Job title: SOD Business Analyst
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Location requirements: Hybrid, Arlington, United States

About the role

• SOD Business Analyst support for the Department of War's audit activities. Responsible for identifying risks and ensuring compliance in financial and operational systems.

Responsibilities

• Evaluate end-to-end business processes and system access models to identify segregation of duties risks that could impact auditability, internal controls, and compliance
• Work closely with audit, IT, and functional stakeholders to assess access configurations, document control gaps, and support remediation and risk mitigation efforts within a consolidated audit environment
• Analyze end-to-end business processes and system workflows to identify points where system access enables initiation, approval, processing, and recording of transactions
• Identify and document Segregation of Duties (SOD) conflicts across financial and operational systems
• Define incompatible duties and assess the adequacy of existing controls
• Evaluate user access roles, permissions, and security models, including privileged, non-privileged, and temporary/emergency access
• Support assessment and documentation of compensating controls and management oversight controls (when applicable)
• Apply internal control and risk management frameworks (e.g., FISCAM, COSO) to support audit readiness and compliance objectives
• Collaborate with audit teams, system owners, and functional stakeholders to support consolidated audit efforts
• Prepare documentation, analyses, and deliverables to support audit findings, remediation planning, and management responses
• Participate in briefings, working sessions, and reviews with government stakeholders

Requirements

• Bachelor’s Degree from an accredited institution
• Demonstrated experience analyzing end-to-end business processes and system workflows in financial or operational environments
• Working knowledge of Segregation of Duties (SOD) concepts and common conflict scenarios
• Experience evaluating system access controls and access types (privileged, non-privileged, emergency/temporary access)
• Applied knowledge of risk management and internal control frameworks, such as FISCAM and COSO
• Strong analytical, documentation, and problem-solving skills
• Ability to clearly communicate technical and control-related concepts to both technical and non-technical audiences
• Active Secret security clearance required

Benefits

• Flexible work arrangements
• Professional development opportunities