IT Control Assessment Manager

Kearney & Company; Alexandria (VA); On-site; USD 80,000 - 140,000; Full time

Benefits offered by this job

Paid holidays, vacation and sick time

401(k) retirement plan

Health insurance package

Education savings plan (529)

Flexible Spending & Health Savings

Legal Insurance and Pet Insurance

Employee Assistance & wellness

Job summary

Kearney & Company is seeking an IT Control Assessment Manager to lead IT A-123 controls assessments for federal clients, strengthen IT governance, and support regulatory compliance. The role blends advisory leadership with hands-on delivery, mentoring staff, and driving remediation efforts across ERP, cloud, and modernization projects. Strong communication and collaboration with executives are essential to success.

Qualifications

• Minimum 6 years experience in IT Audit, Internal Controls Assessment and related governance support.
• BA/BS degree from an accredited college/university.
• Minimum 2 years of federal government experience.
• Minimum 2 years of external assessment workpaper writing experience under CIGIE or GAGAS.
• Strong written and verbal communication.
• Must be able to obtain and maintain US Citizenship suitability clearance.

Responsibilities

• Lead IT control assessments including ITGCs, BPACs, internal IT audits, and OMB A-123 evaluations.
• Facilitate workshops, walkthroughs, risk assessments, and client meetings to evaluate processes, controls, and technology risks.
• Assess technology risks and provide practical recommendations to improve security, compliance, and efficiency.
• Partner with executives and stakeholders to develop sustainable remediation solutions for control deficiencies.
• Collaborate with system integrators and clients to plan POA&Ms and long-term control improvements.
• Review remediation activities to ensure alignment with compliance requirements.
• Support modernization projects (ERP, cloud, digital transformation) with governance and control considerations.
• Develop executive-ready reports and client deliverables communicating risks and priorities.
• Mentor seniors and staff, providing guidance and coaching.
• Support business development with proposals, presentations, and solution design.
• Contribute to continuous improvement of GRC methodologies and offerings.

Skills

Professional communication skills

Clear business writing

IT general & application controls

US suitability clearance

Education

BA/BS degree from accredited college/university

Job description

paid holidays, sick time, 401(k), retirement plan

Kearney & Company is seeking an IT Control Assesment Manager to join our growing firm! Responsibilities include but not limited to:
This role is responsible for leading IT A-123 controls assessment, partnering with federal clients to strengthen IT governance, improve technology risk management, modernize internal control environments, and support regulatory and compliance initiatives. The Manager will support consulting engagements focused on IT risk, financial systems controls, cybersecurity governance, compliance, and remediation while also supporting internal IT audit and control assessment activities when required.
This position requires a client-focused professional who can balance strategic advisory services with hands-on delivery, build trusted relationships, and lead teams in solving complex technology and compliance challenges.

• Perform and oversee IT control assessments, including IT General Controls (ITGCs), Business Process Application Controls (BPACs), internal IT audits, and OMB A-123 evaluations.
• Facilitate workshops, walkthroughs, risk assessments, and client meetings to evaluate business processes, system controls, and technology risks.
• Assess technology risks and identify practical recommendations that improve security, compliance, operational efficiency, and business resilience.
• Partner with client executives, business stakeholders, system owners, and implementation teams to develop sustainable solutions for identified control deficiencies.
• Collaborate with system integrators and client leadership to develop actionable remediation strategies, Plans of Action and Milestones (POA&Ms), and long-term control improvements.
• Review remediation activities and provide guidance to ensure corrective actions effectively address root causes and satisfy compliance requirements.
• Support financial system modernization, ERP implementations, cloud migrations, and digital transformation initiatives by integrating governance, risk, and control considerations throughout the project lifecycle.
• Develop executive-ready presentations, assessment reports, and client deliverables that clearly communicate risks, recommendations, and implementation priorities.
• Mentor seniors and staffing by providing technical guidance, quality reviews, coaching, and career development.
• Support business development activities, including proposal development, client presentations, solution design, and identification of follow-on consulting opportunities.
• Contribute to the continuous improvement of the firm's Governance, Risk, and Compliance (GRC) methodologies, templates, accelerators, and service offerings

Kearney & Company is seeking an IT Control Assesment Manager to join our growing firm! Responsibilities include but not limited to:
This role is responsible for leading IT A-123 controls assessment, partnering with federal clients to strengthen IT governance, improve technology risk management, modernize internal control environments, and support regulatory and compliance initiatives. The Manager will support consulting engagements focused on IT risk, financial systems controls, cybersecurity governance, compliance, and remediation while also supporting internal IT audit and control assessment activities when required.
This position requires a client-focused professional who can balance strategic advisory services with hands-on delivery, build trusted relationships, and lead teams in solving complex technology and compliance challenges.

• Perform and oversee IT control assessments, including IT General Controls (ITGCs), Business Process Application Controls (BPACs), internal IT audits, and OMB A-123 evaluations.
• Facilitate workshops, walkthroughs, risk assessments, and client meetings to evaluate business processes, system controls, and technology risks.
• Assess technology risks and identify practical recommendations that improve security, compliance, operational efficiency, and business resilience.
• Partner with client executives, business stakeholders, system owners, and implementation teams to develop sustainable solutions for identified control deficiencies.
• Collaborate with system integrators and client leadership to develop actionable remediation strategies, Plans of Action and Milestones (POA&Ms), and long-term control improvements.
• Review remediation activities and provide guidance to ensure corrective actions effectively address root causes and satisfy compliance requirements.
• Support financial system modernization, ERP implementations, cloud migrations, and digital transformation initiatives by integrating governance, risk, and control considerations throughout the project lifecycle.
• Develop executive-ready presentations, assessment reports, and client deliverables that clearly communicate risks, recommendations, and implementation priorities.
• Mentor seniors and staffing by providing technical guidance, quality reviews, coaching, and career development.
• Support business development activities, including proposal development, client presentations, solution design, and identification of follow-on consulting opportunities.
• Contribute to the continuous improvement of the firm's Governance, Risk, and Compliance (GRC) methodologies, templates, accelerators, and service offerings

Qualifications

Required Qualifications:

• Minimum 6 years experience in IT Audit, Internal Controls Assessment, performing IT compliance and security assessments or related audit management, remediation, and governance and policy support for external IT security assessments
• BA/BS degree from an accredited college/university
• Minimum 2 years of federal government experience
• Minimum 2 years of external assessment workpaper writing experience, under CIGIE or GAGAS fieldwork requirements
• Professional communication skills and clear business writing
• Must have an in depth understanding of IT general and application controls.
• Ability to obtain and maintain US Suitability clearance (requires US Citizenship)

Preferred Qualifications

• Highly preferred professional certification: CPA, CISSP
• Preferred professional certification: CISA, CGFM
• DHS experience
• Cybersecurity; FISCAM; FISCAM Remediation
• FISMA Audit; FISMA Remediation
• Internal Control Support Services (A-123)
• IT Risk Assessment Support
• OMB Circular A-123
• SSAE 18/SOC I/Service Provider Audit

Overview

Exclusively focused on the Government, Kearney & Company provides financial services, including auditing, consulting, and technology services. Our commitment to our employees and clients as well as to dedication and trust, critical values to our Firm, have led to Kearney's recognition as one of the leading accounting firms in the country. Based on our employees' feedback, we are also consistently rated a Best Place to Work. Employment at Kearney means a flexible, collaborative, and open-minded work environment. We hope it is your "first easy decision." Learn more at www.kearneyco.com/careers.

,
The expected salary range for this position is between $80,000 and $140,000. This range is representative of base pay only and does not include straight time pay for hours worked over 40 per week, company contributions towards paid benefits, and/or bonuses. Actual compensation (meeting or exceeding the range) will be determined based on specific experience, education, work location, clearance level, and other factors permitted by law. This position is eligible for bonuses (when applicable).

We also offer a competitive benefits package that includes:

• Medical, Dental, Vision, Life, AD&D, and Disability Insurance
• 401(k) Retirement Plan and 529 Education Savings Plan
• Flexible Spending & Health Savings Account
• Accident, Critical Illness, Hospital Indemnity Insurances
• Legal Insurance and Pet Insurance
• Employee Assistance Program, fitness and wellness benefits, and other firm benefits
• Paid holidays, vacation, and sick time

EEO Notice

Work location is subject to change based on client requirements.

Applicants have Rights under Federal Employment Laws

EEO Notice and Applicant Accommodation Requests

Kearney & Company is an Equal Opportunity Employer and will consider all qualified applicants without regard to race, color, national origin, ethnicity, ancestry, genetic information, religion, sex, gender, gender identity, sexual orientation, marital status, pregnancy, childbirth, any medical condition related to pregnancy or childbirth, age, disability, protected veteran status, relationship or association to a protected veteran, or any other characteristic protected by local, state or federal laws, rules or regulation. Click here to understand your rights on employment discrimination. Click here for more information on Kearney's EEO Policy.

If you would like to request a reasonable accommodation, regarding accessibility of our website, a modification or adjustment of the job application or interview process due to a disability, please call 703-236-2391 or email [e-mail]. Please be advised that this contact information is for accommodation requests only and cannot be used to inquire about the status of an application.

Family and Medical Leave Act (FMLA)

FMLA is designed to help employees balance their work and family responsibilities by allowing them to take reasonable unpaid leave for certain family and medical reasons. Kearney & Company provides eligible employees with up to 12 weeks of unpaid, job-protected leave per year. Military family leave is available for up to 26 weeks under FMLA. Click here to learn more about FMLA rights.

Employee Polygraph Protection Act (EPPA)

The EPPA prohibits most private employers from using lie detector tests either for pre-employment screening or during the course of employment. Kearney & Company adheres all provisions of the EPPA. Click here to learn more about the EPPA.