Managing IT Risk & Internal Audit Consultant

Responsibilities

• Perform rigorous audits and assessments of IT controls using industry-standard guidance and leading practices
• Evaluate the design and operating effectiveness of IT controls by analyzing security plans, SOPs, and system configurations
• Document IT controls test results in a consistent, high-quality manner to ensure auditability
• Lead the development and execution of IT corrective action plans and remediation strategies to address deficiencies
• Work directly with client personnel to identify root causes of IT control weaknesses and develop robust remediation plans
• Provide subject matter expertise on IT controls and respond to ad-hoc requests from Department of Defense (DoD) stakeholders
• Support business development activities, including proposal development and identifying potential client needs

Requirements

• Active and maintained "Secret" Federal or DoD security clearance
• Bachelor's Degree
• 5+ years of experience in IT controls, audit, assessment, or remediation

Preferred Qualifications

• Certified Information Systems Auditor (CISA) certification
• Working knowledge of the FISCAM and other relevant federal information assurance laws and regulations
• Experience performing OMB Circular A-123 or similar internal control assessments
• Expertise in specific IT control areas such as Access Management, Segregation of Duties, Audit Logging, Configuration Management, or Change Management

Benefits

• Medical, Rx, Dental, and Vision Insurance
• 401(k) Retirement Plan and Health Savings Account
• Parental Leave and Adoption Assistance
• Tuition Reimbursement and continuous learning opportunities
• Student Loan PayDown program
• Discretionary variable incentive bonus eligibility

About the Company

Guidehouse is a global AI-led professional services firm delivering advisory, technology, and managed services to the commercial and government sectors. We drive efficiency and resilience in the healthcare, financial services, energy, infrastructure, and national security markets, helping clients outwit complexity through an integrated business technology approach.