Senior IT Security Auditor (TS/SCI)

Guidehouse Inc.; Chantilly (VA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

401(k) Retirement Plan

Paid Holidays

Job summary

Guidehouse is seeking an experienced IT controls consultant in Chantilly, VA to perform assessments using industry guidance and best practices. You will interview ISSOs and system administrators, review security artifacts, and evaluate control effectiveness against federal requirements.

The role requires an active TS/SCI clearance with CI polygraph, a technical or business bachelor’s degree, and 3+ years of federal IT consulting experience.

Qualifications

• Active TS/SCI clearance with CI polygraph.
• Bachelor's Degree in a technical or business field.
• 3+ years of IT consulting experience.
• Experience consulting for the federal government and senior government clients.
• Knowledge of Federal information security laws and guidance (FISMA, NIST SP 800, FISCAM).

Responsibilities

• Perform IT controls assessments using industry guidance and best practices.
• Interview client stakeholders including ISSOs and system admins.
• Review artifacts like SSPs, SOPs, audit logs, configuration and vulnerability scans.
• Evaluate IT controls against federal requirements and guidance.
• Document IT controls testing results clearly for review.
• Summarize assessment results to senior leadership and client stakeholders.
• Identify root causes of weaknesses and develop remediation plans.
• Provide SME guidance on IT security and assurance.
• Respond to ad-hoc IT security requests and plan day-to-day activities.
• Mentor junior team members on IT controls testing.

Education

Active TS/SCI clearance with CI polygraph

Bachelor's Degree in Technical or Business field

3+ years IT consulting experience

Federal government consulting experience

Knowledge of FISMA, NIST SP 800, FISCAM

Job description

Guidehouse is seeking an experienced IT controls consultant in Chantilly, VA to perform assessments using industry guidance and best practices. You will interview ISSOs and system administrators, review security artifacts, and evaluate control effectiveness against federal requirements.

The role requires an active TS/SCI clearance with CI polygraph, a technical or business bachelor’s degree, and 3+ years of federal IT consulting experience.