IT Risk and Controls Consultant

Guidehouse - Springfield, VA

Full-time - Entry Level

Springfield, VA

Professional, Scientific, and Technical Services

About the position

The IT Risk and Controls Consultant will engage with stakeholders and deliver technical support for a Department of Homeland Security (DHS) client, focusing on IT controls audits, assessments, and remediation efforts. This role is ideal for individuals with an IT audit background who wish to apply their expertise in a consulting capacity rather than as external auditors. The consultant will work closely with clients to enhance internal control processes and ensure compliance with relevant standards.

Responsibilities

• Perform rigorous audits/assessments of IT controls using industry-standard guidance and leading practices.
• Conduct walkthrough interviews and maintain communication with various client stakeholders, including system personnel.
• Request, obtain, review, and analyze artifacts to assist in executing IT controls testing.
• Evaluate the design and operating effectiveness of IT controls using provided artifacts and professional judgment.
• Document the results of IT controls test work in a consistent and high-quality manner.
• Summarize and communicate IT controls assessment results to client stakeholders, including senior leadership.
• Plan and execute day-to-day activities of IT controls assessments individually and for the team.
• Work with client personnel to analyze known IT control weaknesses and develop remediation plans.
• Provide subject matter expertise on IT controls and respond to ad-hoc requests from clients.
• Develop documents to support internal control assessment planning decisions and control identification.
• Support the development of corrective action plans to resolve control deficiencies.
• Review financial system modernization functionality and application controls for audit readiness.
• Assess financial system modernization efforts regarding audit readiness and future risks.
• Prepare presentations, briefing materials, and guides to promote awareness of OMB A-123 and internal controls.

Requirements

• US Citizenship and ability to obtain and maintain a Federal or DoD Public Trust.
• Bachelor's Degree.
• Three (3) or more years of experience in IT controls, audit, assessment, and/or remediation.

Nice-to-haves

• Master's Degree.
• Certified Information Systems Auditor (CISA) certification.
• Knowledge and experience in IT risk and controls through IT audits and assessments.
• Experience supporting an internal control program.
• Experience performing IT audits or OMB Circular A-123 assessments.
• Experience testing or remediating IT controls in areas such as access management, segregation of duties, and configuration management.

Benefits

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Discretionary variable incentive bonus eligibility
• Parental Leave and Adoption Assistance
• 401(k) Retirement Plan
• Basic Life & Supplemental Life
• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
• Short-Term & Long-Term Disability
• Student Loan PayDown
• Tuition Reimbursement, Personal Development & Learning Opportunities
• Skills Development & Certifications
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Emergency Back-Up Childcare Program
• Mobility Stipend