Federal IT Security Controls Auditor & Consultant

Guidehouse; McLean (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental & Vision Insurance

Parental Leave

401(k) Retirement Plan

Professional development

Mobility stipend

Job summary

Guidehouse is seeking an IT Security Auditor to lead stakeholder engagement and delivery for IT controls assessments supporting federal agencies. You will analyze control weaknesses, identify root causes, and develop remediation plans, mentoring junior staff as needed.

The ideal candidate has an information security or IT audit background with experience in federal environments, FISMA/NIST guidance, and strong documentation and communication skills. Security clearance is required.

Qualifications

• Active TS/SCI clearance with CI polygraph is required.
• 2+ years' IT consulting experience with federal clients.
• Knowledge of federal information security laws and guidance (FISMA, NIST SP 800, FISCAM).
• Experience in IT controls testing and remediation planning.

Responsibilities

• Lead IT controls assessments for federal agencies using established guidance.
• Interview client stakeholders and IT personnel (ISSOs, admins) for testing insights.
• Review system security plans, SOPs, logs, scans, and artifacts for control testing.
• Evaluate control effectiveness against federal requirements and best practices.
• Document assessment results clearly for review by leadership and clients.
• Summarize findings and provide remediation recommendations to stakeholders.

Skills

IT controls

IT auditing

Stakeholder engagement

Information security

Vulnerability assessments

NIST SP 800

FISMA

Documentation

Mentoring

Education

Bachelor's degree in a Technical or Business field

Tools

DISA STIGs

Vulnerability scanners

Job description

Guidehouse is seeking an IT Security Auditor to lead stakeholder engagement and delivery for IT controls assessments supporting federal agencies. You will analyze control weaknesses, identify root causes, and develop remediation plans, mentoring junior staff as needed.

The ideal candidate has an information security or IT audit background with experience in federal environments, FISMA/NIST guidance, and strong documentation and communication skills. Security clearance is required.