IT Control & Risk Manager – A-123 & GRC Expert

Kearney & Company; Camp Springs (MD); On-site; USD 77,000 - 125,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

AD&D Insurance

Disability Insurance

401(k) Plan

529 Education Savings Plan

Flexible Spending Account

Health Savings Account

Paid holidays

Vacation

Sick time

Job summary

Kearney & Company is seeking an IT Control Assessment Manager to lead IT A-123 controls assessments for federal clients, strengthening governance and risk management. The role blends advisory work with hands-on delivery and requires collaboration with executives, system owners, and project teams.

You will oversee ITGCs, BPACs, and internal IT audits, develop remediation plans, mentor staff, and contribute to business development.

Qualifications

• Minimum 6 years experience in IT Audit, Internal Controls Assessment, performing IT compliance and security assessments or related audit management, remediation, and governance and policy support for external IT security assessments
• BS in Information Technology or a related field
• Minimum 2 years of federal government experience
• Minimum 2 years of external assessment workpaper writing experience, under CIGIE or GAGAS fieldwork requirements
• Professional communication skills and clear business writing
• Must have an in depth understanding of IT general and application controls
• Ability to work onsite in CampSprings, MD 5 days a week
• Ability to obtain and maintain US Suitability clearance (Requires US Citizenship)

Responsibilities

• Perform and oversee IT control assessments, including IT General Controls (ITGCs), BPACs, internal IT audits, and OMB A-123 evaluations
• Facilitate workshops, walkthroughs, risk assessments, and client meetings to evaluate business processes, system controls, and technology risks
• Assess technology risks and identify practical recommendations that improve security, compliance, operational efficiency, and business resilience
• Partner with client executives, business stakeholders, system owners, and implementation teams to develop sustainable solutions for identified control deficiencies
• Collaborate with system integrators and client leadership to develop actionable remediation strategies, Plans of Action and Milestones (POA&Ms), and long-term control improvements
• Review remediation activities and provide guidance to ensure corrective actions effectively address root causes and satisfy compliance requirements
• Support financial system modernization, ERP implementations, cloud migrations, and digital transformation initiatives by integrating governance, risk, and control considerations throughout the project lifecycle
• Develop executive-ready presentations, assessment reports, and client deliverables that clearly communicate risks, recommendations, and implementation priorities
• Mentor seniors and staffing by providing technical guidance, quality reviews, coaching, and career development
• Support business development activities, including proposal development, client presentations, solution design, and identification of follow-on consulting opportunities
• Contribute to the continuous improvement of the firm's Governance, Risk, and Compliance (GRC) methodologies, templates, accelerators, and service offerings

Skills

IT Audit

ITGCs

BPACs

Risk assessment

Client communication

Team leadership

Education

BS in Information Technology

Job description

Kearney & Company is seeking an IT Control Assessment Manager to lead IT A-123 controls assessments for federal clients, strengthening governance and risk management. The role blends advisory work with hands-on delivery and requires collaboration with executives, system owners, and project teams.

You will oversee ITGCs, BPACs, and internal IT audits, develop remediation plans, mentor staff, and contribute to business development.