IT Security and Controls Auditor - Senior Consultant

Company: Guidehouse
Location: Washington
Posted on: March 29, 2020

Job Description:

Job DescriptionOverview: Interested in working with talented people to help develop innovative solutions to some of society's most complex and challenging problems? We are Guidehouse, a leading consulting firm serving the public sector and commercial clients with specialized capabilities in strategy, technology, and risk management. You may not yet know our name, but we have a rich history. Guidehouse is a combination of PwC's former public sector practice and Navigant's deep expertise in energy, financial services and healthcare. We offer an exciting, fast-paced environment that fosters intellectual growth and rewards individuals based on impact, not tenure. Our firm is at the forefront of an emerging model solving complex problems that stretch across government and private companies, affording our people the opportunity to be on the cutting edge of the consulting profession. By focusing on markets facing transformational change, technology-driven innovation, and significant regulatory pressure, our employees also develop and deploy world class knowledge and problem solving that leads to breakthrough solutions. Responsibilities: • Support internal audit unit at federal agency in performing assessments of information technology general controls (ITGC) and application controls for OMB Circular A-123 and FISCAM audit readiness • Document processes and controls, develop and execute tests of design and operating effectiveness of controls, document weaknesses, including remediation recommendations, and document plans of action and milestones (POA&M) • Conduct independent verification and validation (IV&V) on remediated control weaknesses • Advise on audit risk considerations related to implementation of new information technology (IT) solutions Qualifications: • Security Clearance: Active Top Secret clearance contraactually required • Minimum Years of Experience: 5 years' experience • Minimum Degree Required: Bachelor's degree • Must have IT audit experience • A relevant professional certification such as the Certified Information System Security Professional (CISSP), the Certified Information Systems Auditor (CISA), or a comparable IT security/IT audit professional certification • A demonstrated knowledge of and experience in IT risk and controls through IT audits, IT control assessments, and IT security reviews • A working knowledge of FISMA, NIST SP 800 series, FISCAM, and other relevant federal information assurance laws, regulations, and guidance • Experience performing OMB Circular A-123 or similar IT internal control assessments and advising on remediating weaknesses for IT general controls and application controls • Exceptional communications skills (written and oral) • Experience remediating and implementing IT controls in an organization's enterprise environment is beneficial Disclaimer: * This position requires successful completion of a background check and employment verification. * The successful candidate must not be subject to employment restrictions from a former employer (such as a non-compete) that would prevent the candidate from performing the job responsibilities as described.

Keywords: Guidehouse, Washington DC , IT Security and Controls Auditor - Senior Consultant, Other , Washington, DC