Federal IT Controls Auditor – TS/SCI with Poly

Guidehouse Inc.; Chantilly (VA); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) Retirement Plan

Parental Leave

Tuition Reimbursement

Mobility Stipend

Employee Referral Program

Bonus

Job summary

Guidehouse is seeking an IT Security Auditor to lead stakeholder engagement and technical delivery for IT controls assessments and program evaluations supporting federal agencies. You will analyze control weaknesses, root causes, and remediation plans.

The role requires active TS/SCI with a counterintelligence polygraph, a technical or business degree, and 2+ years of IT consulting with federal clients; familiarity with FISMA, NIST SP 800, and IT risk management is preferred.

Qualifications

• Active TS/SCI clearance with Counterintelligence polygraph.
• Degree in technical or business field.
• 2+ years IT consulting experience with federal clients.
• Knowledge of FISMA, NIST SP 800 series and FISCAM.

Responsibilities

• Perform IT controls assessments using industry-standard guidance and best practices.
• Interview client stakeholders including ISSOs and system administrators.
• Review documents and artifacts for IT controls testing (SSPs, SOPs, logs, scans).
• Evaluate control implementations against federal requirements and guidance.
• Document IT controls testing results for review and understanding.
• Summarize IT controls assessment results to senior leadership.
• Identify root causes of weaknesses and develop remediation plans.
• Provide SME guidance on IT security and assurance to client personnel.
• Respond to ad-hoc IT security requests from client personnel.
• Plan and execute day-to-day IT assessment activities for team.
• Mentor junior team members in controls testing responsibilities.

Skills

IT controls testing

Stakeholder engagement

IT auditing

Federal government consulting

Vulnerability assessment

Remediation planning

Documentation & reporting

Mentoring

Education

Bachelor's Degree in a Technical or Business field

Job description

Guidehouse is seeking an IT Security Auditor to lead stakeholder engagement and technical delivery for IT controls assessments and program evaluations supporting federal agencies. You will analyze control weaknesses, root causes, and remediation plans.

The role requires active TS/SCI with a counterintelligence polygraph, a technical or business degree, and 2+ years of IT consulting with federal clients; familiarity with FISMA, NIST SP 800, and IT risk management is preferred.