IT Security Auditor - Senior Consultant with Security Clearance
Not Disclosed•Full-TimeOn-site
location_on13939, Valley Country Drive, Brookfield, Chantilly, Fairfax County, Virginia, 20151, United States
About Guidehouse
Guidehouse is a leading professional services firm dedicated to helping clients navigate complex challenges. We are committed to creating a diverse and supportive workplace where every employee can thrive. As an Equal Opportunity Employer, we consider qualified applicants regardless of background, including protected veterans and individuals with disabilities. We adhere to all applicable laws regarding criminal history and recruitment practices, ensuring a fair and transparent hiring process.
About the Role
The Senior IT Security Auditor serves as a critical bridge between technical security realities and federal compliance requirements. In this role, you will lead stakeholder engagement and technical delivery for efforts supporting federal agencies with IT controls assessments and program evaluations. This position is ideal for professionals with a background in information security, assurance, or IT audit who are passionate about utilizing their expertise to analyze IT control weaknesses, identify root causes, and develop robust remediation plans for the federal government.
Your day-to-day involves conducting deep-dive assessments using industry-standard guidance and leading best practices. You will interact with a wide range of client stakeholders, from Information System Security Officers (ISSOs) and system administrators to senior leadership, to gather insights and communicate findings. A significant portion of your time will be dedicated to reviewing artifacts such as system security plans, SOPs, audit logs, and vulnerability scans to evaluate the implementation and effectiveness of IT controls against federal requirements like FISMA and NIST SP 800.
Beyond technical analysis, you will play a key role in mentoring junior team members and providing subject matter expertise on IT security matters. You will document your findings in a high-quality, consistent manner that allows for easy review and understanding, ensuring that assessment results are clearly summarized and actionable for clients. This role offers the opportunity to work on ad-hoc requests and lead the planning and execution of IT assessments, both individually and as part of a team.
Hiring Process & Application
To apply, please submit your resume through our official channels. All communication regarding recruitment will be sent from official Guidehouse email domains (e.g., @guidehouse.com). Please be aware that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process. If you require an accommodation to apply or interview, please contact Guidehouse Recruiting at 1-571-633-1711 or via email. All information provided will be kept confidential and used solely to facilitate the accommodation process.
Our Commitment to Diversity and Inclusion
Guidehouse is an Equal Opportunity Employer. We are committed to building a workforce that reflects the diversity of the communities we serve. We consider qualified applicants with criminal histories in a manner consistent with applicable laws, including the Fair Chance Ordinance of Los Angeles and San Francisco. We do not accept unsolicited resumes from search firms or staffing agencies; all such resumes are the property of Guidehouse.
Work location
Work model: On-site
13939, Valley Country Drive, Brookfield, Chantilly, Fairfax County, Virginia, 20151, United States
Chantilly, Virginia
Key Responsibilities
- check_circleLead stakeholder engagement and technical delivery for federal IT controls assessments
- check_circlePerform assessments of IT controls using industry-standard guidance and best practices
- check_circleConduct interviews with IT system personnel including ISSOs and system administrators
- check_circleReview and analyze documents such as system security plans, audit logs, and vulnerability scans
- check_circleDocument IT controls testing results in a consistent and high-quality manner
- check_circleAnalyze IT control weaknesses, identify root causes, and develop remediation plans
- check_circleProvide subject matter expertise on IT security and assurance matters to client personnel
- check_circleMentor junior team members in day-to-day IT controls testing responsibilities
- check_circleEvaluate implementation and effectiveness of IT controls against federal requirements
Requirements
- verifiedActive Top Secret SCI clearance with Polygraph
- verifiedBachelor's Degree in Technical or Business field
- verified3+ years IT consulting experience
- verifiedExperience consulting with federal government
- verifiedKnowledge of FISMA, NIST SP 800, FISCAM
Nice to Have
Relevant certification such as CISA or CISM. Demonstrated knowledge and experience in IT risk and controls through IT audits, IT controls assessments, or IT security reviews. Working knowledge of FISMA, NIST SP 800 series, FISCAM, and other relevant federal information assurance laws, regulations, and guidance. Experience performing FISMA, OMB Circular A-123, or similar internal control assessments. Experience implementing or auditing access and account management principles, including authorization, provisioning, recertification, and separation of duties. Experience implementing or auditing contingency planning principles, including backups, testing of backups, and alternate processing sites. Experience implementing or auditing configuration management principles, including configuration baseline concepts, baseline deviations, baseline maintenance, change control, and monitoring, and industry-accepted configuration settings such as DISA STIGs. Experience performing audit logging and monitoring, including generation of audit logs, use of audit log aggregation and analysis tools, and audit log monitoring and review.
Benefits & Perks
check_circleMedical, Rx, Dental & Vision Insurancecheck_circlePersonal and Family Sick Time & Company Paid Holidayscheck_circle401(k) Retirement Plancheck_circleBasic Life & Supplemental Life InsuranceHealth Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
Similar Job Opportunities
IT Advisory Manager
Guidehouse • Chantilly, Virginia
Not Disclosedarrow_forward
ISSO - MacDill AFB with Security Clearance
Peraton • Tampa, Florida
$80k-128karrow_forward
Information Systems Security Officer (ISSO) (Journeyman)
International Physical Therapy Academy IPTA • Huntsville, Alabama
Not Disclosedarrow_forward
Skills, education and keywords
Skills: Fisma, Nist SP 800, Fiscam, Cisa, Cism, Disa Stig, Omb Circular A-123, Ts/sci, Polygraph, Ci.
Education: Bachelor's Degree in a Technical or Business field required.
Frequently asked questions about IT Security Auditor - Senior Consultant with Security Clearance at Guidehouse
What does a IT Security Auditor - Senior Consultant with Security Clearance at Guidehouse do?expand_more
Day-to-day, the IT Security Auditor - Senior Consultant with Security Clearance at Guidehouse will lead stakeholder engagement and technical delivery for federal it controls assessments; perform assessments of it controls using industry-standard guidance and best practices; conduct interviews with it system personnel including issos and system administrators; and review and analyze documents such as system security plans, audit logs, and vulnerability scans.
What are the requirements for this IT Security Auditor - Senior Consultant with Security Clearance role?expand_more
Guidehouse is looking for candidates who meet the following requirements: Active Top Secret SCI clearance with Polygraph; Bachelor's Degree in Technical or Business field; 3+ years IT consulting experience; Experience consulting with federal government; and Knowledge of FISMA, NIST SP 800, FISCAM.
Where is the IT Security Auditor - Senior Consultant with Security Clearance role at Guidehouse located?expand_more
IT Security Auditor - Senior Consultant with Security Clearance at Guidehouse is based in 13939, Valley Country Drive, Brookfield, Chantilly, Fairfax County, Virginia, 20151, United States. This is a on-site role.
Is this IT Security Auditor - Senior Consultant with Security Clearance job remote, hybrid, or on-site?expand_more
Guidehouse has listed this IT Security Auditor - Senior Consultant with Security Clearance role as on-site.
How much experience is required for this IT Security Auditor - Senior Consultant with Security Clearance role?expand_more
IT Security Auditor - Senior Consultant with Security Clearance at Guidehouse typically requires 3+ years of relevant experience at the senior level.
What skills do you need for the IT Security Auditor - Senior Consultant with Security Clearance role at Guidehouse?expand_more
Key skills for IT Security Auditor - Senior Consultant with Security Clearance at Guidehouse include Fisma; Nist SP 800; Fiscam; Cisa; Cism; Disa Stig; Omb Circular A-123; and Ts/sci.
What education is required for IT Security Auditor - Senior Consultant with Security Clearance at Guidehouse?expand_more
Educational requirements for this role: Bachelor's Degree in a Technical or Business field required.
What category does the IT Security Auditor - Senior Consultant with Security Clearance role belong to?expand_more
IT Security Auditor - Senior Consultant with Security Clearance at Guidehouse is part of the it job category on Recrutus.