Federal IT Controls & Risk Consultant

3M HEALTHCARE; Bloomington (IL); On-site; USD 74,000 - 124,000; Full time

Benefits offered by this job

Medical, Rx, Dental & Vision Insurance

Paid Holidays

Discretionary bonus

401(k) Retirement Plan

Tuition Reimbursement

Professional development & learning

Employee referral program

Mobility stipend

Job summary

Guidehouse is seeking an experienced IT risk professional to support planning, execution, and documentation of IT general and application control assessments aligned with federal standards such as FISMA, NIST, and A‑123. The role focuses on testing IT controls across financial reporting systems and coordinating with auditors and business owners.

You will map systems to reporting processes, evaluate control design and operation, and contribute to CAP development while guiding junior staff and

Qualifications

• Bachelor’s degree in IT, business, legal, CS, cybersecurity, or related field.
• Minimum of 3+ years of professional experience supporting IT risk, controls, and security assessments within complex federal entities.
• Demonstrated experience with FISMA, FISCAM, FedRAMP, and NIST frameworks.

Responsibilities

• Support planning, execution, and documentation of IT general and application control assessments in alignment with FISMA, NIST, and A‑123.
• Develop and execute IT test plans for systems supporting financial reporting and ensure compliance with federal standards.
• Coordinate with internal control teams, business owners, and external auditors to identify and test key IT controls across major cycles.
• Map IT systems to financial reporting processes and support coverage of control objectives and risk areas.
• Evaluate the design and operating effectiveness of IT controls, identify deficiencies, and support CAP development.
• Maintain secure, well‑organized documentation and workpapers for audit readiness.

Skills

IT risk assessment

Internal controls

FISMA/FISCAM/NIST

Audit coordination

Public Trust eligibility

Education

Bachelor’s degree in Information Technology, Business, Legal, Computer Sciences, Cybersecurity, or related field

Tools

Microsoft Power Platform

Dynamics 365

SharePoint

GRC platforms

Job description

Guidehouse is seeking an experienced IT risk professional to support planning, execution, and documentation of IT general and application control assessments aligned with federal standards such as FISMA, NIST, and A‑123. The role focuses on testing IT controls across financial reporting systems and coordinating with auditors and business owners.

You will map systems to reporting processes, evaluate control design and operation, and contribute to CAP development while guiding junior staff and