Federal IT Security Auditor (TS/SCI) - Controls Lead

Jobtome; McLean (VA); On-site; USD 74,000 - 124,000; Full time

Benefits offered by this job

Medical Insurance

Dental & Vision Insurance

401(k) Retirement Plan

Parental Leave & Adoption Assistance

Education & Learning Opportunities

Job summary

Guidehouse is seeking an IT Security Auditor to lead stakeholder engagements and deliver IT controls assessments for federal agencies. You will analyze control weaknesses, root causes, and remediation plans while guiding a project team.

Candidates should have active TS/SCI clearance with CI polygraph, a Bachelor’s degree, and 2+ years in IT consulting for government clients, with knowledge of FISMA, NIST SP 800, and FISCAM.

Qualifications

• Active and maintained TS/SCI clearance with CI polygraph.
• Bachelor’s Degree in a technical or business field.
• 2+ years IT consulting experience, including federal government clients.
• Knowledge of FISMA, NIST SP 800 series, FISCAM.

Responsibilities

• Perform IT controls assessments using industry guidance and best practices.
• Interview client personnel including ISSOs and system admins.
• Review artifacts like SSPs, SOPs, logs, scans for testing.
• Evaluate control effectiveness against federal requirements and guidance.
• Document testing results for reviewer clarity.
• Summarize assessment results to senior leadership and clients.
• Analyze known weaknesses, identify root causes, and draft remediation plans.
• Provide SME guidance on IT security and assurance.
• Respond to ad-hoc IT security requests from clients.
• Plan and execute daily IT assessment activities solo and with the team.
• Mentor junior team members in testing responsibilities.

Skills

Stakeholder engagement

IT controls testing

Federal information security

Root cause analysis

Remediation planning

Education

Bachelor's degree in technical or business field

Job description

Guidehouse is seeking an IT Security Auditor to lead stakeholder engagements and deliver IT controls assessments for federal agencies. You will analyze control weaknesses, root causes, and remediation plans while guiding a project team.

Candidates should have active TS/SCI clearance with CI polygraph, a Bachelor’s degree, and 2+ years in IT consulting for government clients, with knowledge of FISMA, NIST SP 800, and FISCAM.