Federal IT Controls Advisor Lead (TS/SCI)

Guidehouse; Chantilly (VA); On-site; USD 130,000 - 170,000; Full time

Job summary

Guidehouse is seeking an IT Advisory Manager to lead IT risk assessments and controls testing for federal agencies. You will drive stakeholder engagement, manage a team of IT security auditors, and deliver remediation plans for IT control weaknesses.

A Top Secret/SCI clearance with CI polygraph is required. Ideal candidates have 6+ years in IT risk and controls consulting, with knowledge of FISMA and NIST SP 800 series, and the ability to obtain DoD 8570.01-M certification within 90 days.

Qualifications

• Active Top Secret/SCI clearance with CI polygraph.
• Six+ years’ IT risk and controls consulting experience, including federal clients.
• Knowledge of FISMA, NIST SP 800, FISCAM guidance.
• Ability to obtain DoD 8570.01-M (IAT III) cert within 90 days.

Responsibilities

• Lead IT security auditors in IT risk and controls assessments.
• Perform rigorous IT controls assessments using standard guidance and practices.
• Conduct walkthrough interviews with client stakeholders and system personnel.
• Review artifacts like security plans, SOPs, screenshots, and configuration settings.
• Evaluate design and operating effectiveness of IT controls and document results.
• Summarize assessment outcomes for senior leadership.
• Plan and manage day-to-day IT controls assessment activities.
• Identify root causes of IT control weaknesses and develop remediation plans.
• Provide SME guidance on IT controls to client personnel.

Skills

IT risk and controls

IT audit

stakeholder engagement

leadership

communication

Education

Bachelor's degree in information technology or related field

Job description

Guidehouse is seeking an IT Advisory Manager to lead IT risk assessments and controls testing for federal agencies. You will drive stakeholder engagement, manage a team of IT security auditors, and deliver remediation plans for IT control weaknesses.

A Top Secret/SCI clearance with CI polygraph is required. Ideal candidates have 6+ years in IT risk and controls consulting, with knowledge of FISMA and NIST SP 800 series, and the ability to obtain DoD 8570.01-M certification within 90 days.