Federal IT Risk & Controls Lead — TS/SCI

Guidehouse; McLean (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical Insurance

401(k) Retirement Plan

Paid Holidays

Parental Leave

Tuition Reimbursement

Mobility Stipend

Job summary

Guidehouse is seeking an IT Advisory Manager in McLean, VA to lead IT risk and controls engagements for federal agencies. You will manage a team of IT security auditors, perform rigorous control testing, and interact with client stakeholders to drive remediation planning and execution.

The role requires a Top Secret/SCI clearance with polygraph, a strong background in FISMA/NIST guidance, and 6+ years in IT risk/controls consulting.

Qualifications

• Active Top Secret/SCI clearance with CI polygraph.
• Bachelor’s degree in information technology or business.
• 6+ years IT risk and controls consulting experience.
• Experience with federal government clients.
• Knowledge of FISMA, NIST SP 800, FISCAM.
• Ability to obtain DoD 8570.01-M (IAT III) certification within 90 days.

Responsibilities

• Lead a team of IT security auditors for IT risk and controls assessments.
• Perform rigorous IT controls assessments using industry guidance.
• Conduct walkthrough interviews with client stakeholders.
• Review artifacts to assist IT controls testing.
• Evaluate IT controls design and operation.
• Document testing results for repeatability.
• Summarize assessment results to senior leaders.
• Plan and manage day-to-day IT controls testing activities.
• Develop remediation plans with client personnel.
• Provide SME on IT controls and respond to ad-hoc requests.

Skills

IT risk and controls

IT controls testing

Stakeholder engagement

Team leadership

Communication

Education

Bachelor’s degree in information technology or business

Job description

Guidehouse is seeking an IT Advisory Manager in McLean, VA to lead IT risk and controls engagements for federal agencies. You will manage a team of IT security auditors, perform rigorous control testing, and interact with client stakeholders to drive remediation planning and execution.

The role requires a Top Secret/SCI clearance with polygraph, a strong background in FISMA/NIST guidance, and 6+ years in IT risk/controls consulting.