Senior IT Security Auditor – Federal Compliance Lead

Jobtome; Chantilly (VA); On-site; USD 113,000 - 188,000; Full time

Benefits offered by this job

Medical, Rx, Dental & Vision Insurance

Paid holidays & time off

Discretionary bonus eligibility

401(k) Retirement Plan

Life Insurance

Learning & development opportunities

Employee referral program

Job summary

Guidehouse seeks a Senior IT Security Auditor to lead stakeholder engagement and deliver IT controls assessments for federal agencies. You will analyze control weaknesses, identify root causes, and develop remediation plans while mentoring junior staff.

Responsibilities include conducting IT controls testing using NIST/FISMA guidance, interviewing ISSOs and system admins, reviewing documents, and summarizing results for senior leadership. A TS/SCI with CI poly is required.

Qualifications

• ACTIVE and MAINTAINED TS/SCI Federal or DoD security clearance with CI polygraph.
• Bachelor's Degree in a Technical or Business field.
• Three (3) plus years' experience providing IT consulting, including federal government clients.

Responsibilities

• Lead IT controls assessments for federal agencies and communicate results to senior leadership.
• Conduct stakeholder interviews with ISSOs and system administrators.
• Review system security plans, SOPs, audit logs, and vulnerability scans for IT controls testing.
• Evaluate IT controls implementation against federal requirements and guidance.
• Document testing results clearly for review and remediation planning.
• Mentor junior team members in IT controls testing responsibilities.

Skills

Stakeholder engagement

IT controls testing

Documentation & reporting

Mentoring juniors

Interviews with ISSOs

Education

Bachelor's Degree in Technical or Business field

3+ years IT consulting experience (federal clients)

Tools

NIST SP 800 guidance

FISMA guidance

Job description

Guidehouse seeks a Senior IT Security Auditor to lead stakeholder engagement and deliver IT controls assessments for federal agencies. You will analyze control weaknesses, identify root causes, and develop remediation plans while mentoring junior staff.

Responsibilities include conducting IT controls testing using NIST/FISMA guidance, interviewing ISSOs and system admins, reviewing documents, and summarizing results for senior leadership. A TS/SCI with CI poly is required.