Senior IT Security Auditor – Federal Programs

Guidehouse; Chantilly (VA); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Dental & Vision Insurance

401(k) Retirement Plan

Parental Leave & Adoption Support

Tuition Reimbursement

Job summary

Guidehouse is seeking a Senior IT Security Auditor to lead IT controls assessments and program evaluations for federal agencies. You will engage stakeholders, review security documents, and test IT controls against federal requirements, delivering remediation plans and strategic guidance to senior leadership.

Ideal candidates bring information security and IT audit experience, with the ability to analyze weaknesses, identify root causes, and mentor junior staff in day-to-day testing and

Qualifications

• Active Top Secret SCI with CI polygraph is required.
• Bachelor’s Degree in a Technical or Business field.
• Three (3) or more years of IT consulting experience.

Responsibilities

• Lead stakeholder engagement and technical delivery for IT controls assessments and program evaluations.
• Interview client stakeholders including ISSOs and system administrators to gather information.
• Review documents and artifacts such as SSPs, SOPs, audit logs and vulnerability scans for IT controls testing.
• Evaluate IT controls against federal requirements and best practices to determine effectiveness.
• Document testing results clearly for review by clients and leadership.

Skills

Stakeholder Engagement

IT Controls Testing

IT Auditing

Remediation Planning

Communication

Education

Bachelor’s Degree in Technical or Business field

Tools

DISA STIGs

Audit Logs

Vulnerability Scans

SSPs (System Security Plans)

Job description

Guidehouse is seeking a Senior IT Security Auditor to lead IT controls assessments and program evaluations for federal agencies. You will engage stakeholders, review security documents, and test IT controls against federal requirements, delivering remediation plans and strategic guidance to senior leadership.

Ideal candidates bring information security and IT audit experience, with the ability to analyze weaknesses, identify root causes, and mentor junior staff in day-to-day testing and