Internal Controls & Risk Specialist

Internal Controls & Risk Documentation Specialist- [Arlington, VA]

Beacon Hill Financial is partnering with a client in Arlington, VA in the search for an Internal Controls & Risk Specialist to support enterprise risk, internal controls, and audit initiatives. This role focuses on documenting complex business processes, identifying risks, and strengthening the organization’s control environment across financial, operational, and compliance areas. The ideal candidate has strong experience with controls documentation, SOX or internal audit environments, and the ability to translate complex processes into clear, audit‑ready materials. This is an onsite position.

Primary Responsibilities:

• Capture and document end‑to‑end business processes, associated risks, and control activities across financial, operational, and compliance domains
• Prepare and maintain formal controls documentation, including process narratives, procedures, flowcharts, Risk and Control Matrices (RACMs), issue logs, and supporting materials
• Partner with process owners and subject matter experts to gather information and translate discussions into clear, structured, and usable documentation
• Review existing controls documentation to identify gaps, unclear accountability, inconsistent descriptions, or insufficient evidence standards, and recommend improvements
• Support internal audit and internal control programs by ensuring controls are clearly articulated, consistently documented, and aligned with leading practices
• Participate in enterprise risk management activities, including reviewing risk and control assessments, evaluating control design and effectiveness, and tracking remediation efforts
• Assist with Risk and Control Self‑Assessments (RCSAs), issue and incident tracking, and remediation follow‑up activities
• Draft and document management action plans to address control deficiencies and audit observations
• Maintain risk‑related reporting tools, including risk registers, KRIs, KPIs, and issue tracking logs
• Provide support for risk‑based internal audit activities, including walkthroughs, testing support, reporting, and follow‑up as needed