Federal IT Controls Auditor – TS/SCI

Guidehouse; McLean (VA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, Dental & Vision Insurance

401(k) Retirement Plan

Tuition Reimbursement

Job summary

Guidehouse seeks an IT Security Auditor to lead stakeholder engagement and deliver IT controls assessments for federal agencies. You will analyze control weaknesses, identify root causes, and develop remediation plans while coordinating with ISSOs and system administrators.

Requires active TS/SCI with CI polygraph, a technical or business bachelor’s degree, and 2+ years’ federal IT consulting experience. Certification in CISA/CISM is a plus.

Qualifications

• ACTIVE and MAINTAINED TS/SCI clearance with a COUNTERINTELLIGENCE (CI) polygraph
• Bachelor’s Degree in a Technical or Business field
• Two (2) + years' experience providing IT consulting, including federal government clients
• Knowledge of federal information security laws and guidance (FISMA, NIST SP 800, FISCAM)
• Nice to have: CISA or CISM certification

Responsibilities

• Perform IT controls assessments using industry-standard guidance and best practices
• Interview client stakeholders including ISSOs and system administrators
• Review documents like system security plans, SOPs, audit logs, configuration scans, and vulnerability scans
• Evaluate IT controls against federal requirements and guidance
• Document IT controls testing results clearly for review
• Summarize IT controls assessment results to senior leadership
• Identify root causes and develop remediation plans
• Mentor junior team members in testing responsibilities
• Plan and execute day-to-day IT assessments and evaluations
• Address ad-hoc IT security requests

Skills

IT security auditing

IT controls testing

Stakeholder engagement

Mentoring juniors

Education

Bachelor’s degree in technical or business field

Job description

Guidehouse seeks an IT Security Auditor to lead stakeholder engagement and deliver IT controls assessments for federal agencies. You will analyze control weaknesses, identify root causes, and develop remediation plans while coordinating with ISSOs and system administrators.

Requires active TS/SCI with CI polygraph, a technical or business bachelor’s degree, and 2+ years’ federal IT consulting experience. Certification in CISA/CISM is a plus.