Public-Trust IT Risk & Controls Lead

Guidehouse; Springfield (VA); On-site; USD 100,000 - 140,000; Full time

Job summary

Guidehouse is seeking an IT Risk and Controls Consultant to support a DHS client with IT controls audits, assessments, remediation, and related tasks. You will work closely with client stakeholders to review artifacts and document results in line with OMB A-123 and FISCAM guidelines.

The role involves day-to-day control testing, interviewing system personnel, and crafting robust remediation plans. A 3+ year IT controls or IT audit background and the ability to obtain a Public Trust are required.

Qualifications

• Three (3) or more years' experience in IT controls, audit, assessment, AND/OR remediation.
• Experience performing IT audits, IT control assessments, and remediation.
• Familiarity with OMB Circular A-123, FISCAM, and related federal guidance.

Responsibilities

• Perform rigorous audits/assessments of IT controls using industry guidance and best practices.
• Conduct walkthrough interviews and coordinate with client stakeholders including system personnel.
• Review artifacts (security plans, SOPs, screenshots, configuration) for IT control testing.
• Document test results clearly so testers can reproduce conclusions.
• Summarize assessment findings for senior leadership and stakeholders.
• Plan and execute IT controls assessments for a team, including remediation efforts.
• Develop corrective action plans to address material weaknesses and deficiencies.
• Assess production environments for audit readiness and risk exposure.

Skills

IT controls

Audits & assessments

Remediation

Stakeholder engagement

Documentation

Education

Bachelor's Degree

Job description

Guidehouse is seeking an IT Risk and Controls Consultant to support a DHS client with IT controls audits, assessments, remediation, and related tasks. You will work closely with client stakeholders to review artifacts and document results in line with OMB A-123 and FISCAM guidelines.

The role involves day-to-day control testing, interviewing system personnel, and crafting robust remediation plans. A 3+ year IT controls or IT audit background and the ability to obtain a Public Trust are required.