Federal IT Security Senior Consultant - NIST/ATO Expert

Kearney & Company, P.C.; Springfield (VA); On-site; USD 103,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

401(k) Plan

Flexible Spending Account

Paid holidays

Job summary

Kearney & Company is seeking an IT Security Senior Consultant to join our team supporting a high-visibility federal CFO office in Springfield, VA. The Senior Consultant will advise project managers, system owners, and implementation teams on system controls and cyber requirements.

Required knowledge includes SDLC, NIST standards (e.g., SP 800-53 Rev 5) and ATO processes, with duties in IT controls, POA&M, IT audits support, incident response, and mentoring junior staff; U.S.

Qualifications

• Bachelor’s degree in information systems, management, or related field.
• Minimum 6 years of experience with federal systems and IT architecture.
• Familiarity with NIST standards (e.g., SP 800-53 Rev 5).
• Experience supporting federal IT audits and audit findings.
• Experience developing Plan of Action and Milestones (POA&M).
• Ability to obtain a U.S. Secret security clearance (U.S. Citizenship required).

Responsibilities

• Execute ongoing monitoring of standards and guidance to inform project execution.
• Identify and monitor risks in project execution.
• Support day-to-day tasks per project plans and schedules.
• Establish relationships with system owners and technical POCs.
• Provide technical expertise on IT controls and security requirements.
• Develop IT/system policies and processes.
• Lead or mentor junior team members.

Skills

NIST standards

FISMA

POA&M

ATO processes

IT audits

Security architecture

Education

Bachelor's degree in information systems

Tools

NIST SP 800-53

Job description

Kearney & Company is seeking an IT Security Senior Consultant to join our team supporting a high-visibility federal CFO office in Springfield, VA. The Senior Consultant will advise project managers, system owners, and implementation teams on system controls and cyber requirements.

Required knowledge includes SDLC, NIST standards (e.g., SP 800-53 Rev 5) and ATO processes, with duties in IT controls, POA&M, IT audits support, incident response, and mentoring junior staff; U.S.