IT Security Auditor – Senior Consultant

Responsibilities

• Lead stakeholder engagement and technical delivery for federal IT controls assessments and program evaluations
• Perform assessments of IT controls using industry-standard guidance and leading best practices
• Conduct interviews and discussions with client stakeholders, including ISSOs and system administrators
• Review and analyze security artifacts such as system security plans, SOPs, audit logs, and vulnerability scans
• Evaluate the implementation and effectiveness of IT controls against federal requirements
• Document testing results and communicate findings to senior leadership
• Identify root causes of IT control weaknesses and develop detailed remediation plans
• Mentor junior team members in day-to-day IT controls testing responsibilities

Requirements

• Active and maintained TS/SCI Federal or DoD security clearance with a Counterintelligence (CI) polygraph
• Bachelor’s Degree in a Technical or Business field
• 3+ years of experience in IT consulting, including work with federal government clients
• Strong knowledge of federal information security laws and guidance, including FISMA, NIST SP 800, and FISCAM

Preferred Qualifications

• Relevant certifications such as CISA (Certified Information Systems Auditor) or CISM (Certified Information Security Manager)
• Experience performing FISMA, OMB Circular A-123, or similar internal control assessments
• Demonstrated experience auditing access management, contingency planning, or configuration management
• Working knowledge of DISA STIGs and audit log aggregation/analysis tools

Benefits

• Medical, Rx, Dental, and Vision Insurance
• 401(k) Retirement Plan and Health Savings Accounts
• Parental Leave and Adoption Assistance
• Tuition Reimbursement and Skills Development opportunities
• Student Loan PayDown program
• Flexible benefits package including paid holidays and sick time

About the Company

Guidehouse is a global AI-led professional services firm delivering advisory, technology, and managed services to the commercial and government sectors. We drive efficiency and resilience in the healthcare, financial services, energy, infrastructure, and national security markets.