IT Risk Consulting Manager

Kearney & Company • Washington, DC

4h • Onsite

About The Position

Kearney is seeking an IT Risk Consulting Manager to partner with federal clients on strengthening IT governance, technology risk management, internal controls, and regulatory and compliance initiatives. The role supports consulting engagements in IT risk, financial systems controls, cybersecurity governance, compliance, and remediation, and may also support internal IT audit and control assessment activities.

The Manager balances strategic advisory work with hands-on delivery, builds trusted client relationships, and leads teams addressing technology and compliance challenges. The position includes advising on control design and maturity, overseeing IT control assessments and remediation, supporting modernization and transformation initiatives, and developing clear client deliverables. It also involves mentoring team members, supporting business development, and improving the firm’s GRC methodologies and services.

The role requires the ability to work onsite at client locations throughout the Washington, DC metropolitan area and to obtain and maintain a U.S. Security Clearance; U.S. citizenship is required. Work location may change based on client requirements. The expected base salary range is $77,000 to $125,000, with bonus eligibility when applicable. Kearney offers a competitive benefits package and describes its work environment as flexible, collaborative, and open-minded.

Requirements

• Bachelor's degree from an accredited college or university.
• At least four years of experience in IT risk consulting, technology advisory, internal IT audit, IT compliance, or related consulting services.
• Experience advising clients on improving and maturing IT governance, risk management, and internal control environments.
• Experience leading IT control assessments, internal audits, or compliance evaluations involving enterprise applications, ERP systems, cloud technologies, or financial systems.
• Strong understanding of IT General Controls (ITGCs), application controls, technology risk management, and control frameworks.
• Experience working directly with client stakeholders, presenting recommendations, and managing consulting engagements.
• Excellent written and verbal communication skills, including the ability to translate technical concepts into business-focused recommendations.
• Ability to manage multiple client engagements, priorities, and project teams in a consulting environment.
• Ability to work onsite at client locations throughout the Washington, DC metropolitan area.
• Ability to obtain and maintain a U.S. Security Clearance; U.S. citizenship is required.

Nice To Haves

• At least one professional certification such as CISA, CISSP, CRISC, CGEIT, Security+, CPA, or equivalent.
• Experience supporting OMB A-123 IT evaluations within federal agencies.
• Experience with Oracle, Oracle Cloud ERP, or Oracle Federal Financials business applications.
• Experience supporting cloud governance and security within AWS, Azure, Oracle Cloud Infrastructure (OCI), or Google Cloud Platform.
• Experience implementing or administering GRC platforms such as ServiceNow GRC, Diligent HighBond, or Archer.
• Experience supporting FISMA, NIST Cybersecurity Framework, NIST SP 800-53, FedRAMP, or related federal compliance initiatives.
• Bachelor's degree in information systems, computer science, accounting, business, cybersecurity, or a related field from an accredited college or university.

Responsibilities

• Support consulting engagements that strengthen client IT governance, risk management, and internal control environments across enterprise applications, cloud platforms, and business systems.
• Advise clients on designing, implementing, and maturing IT controls for regulatory compliance, operational effectiveness, and organizational objectives.
• Perform and oversee IT control assessments, including IT General Controls (ITGCs), Business Process Application Controls (BPACs), internal IT audits, and OMB A-123 evaluations.
• Assess technology risks and recommend practical improvements to security, compliance, operational efficiency, and business resilience.
• Partner with client executives, business stakeholders, system owners, and implementation teams to develop sustainable solutions for control deficiencies.
• Collaborate with system integrators and client leadership to develop remediation strategies, Plans of Action and Milestones (POA&Ms), and long-term control improvements.
• Review remediation activities and guide corrective actions to address root causes and satisfy compliance requirements.
• Support financial system modernization, ERP implementations, cloud migrations, and digital transformation by incorporating governance, risk, and control considerations throughout the project lifecycle.
• Facilitate workshops, walkthroughs, risk assessments, and client meetings to evaluate business processes, system controls, and technology risks.
• Develop executive-ready presentations, assessment reports, and client deliverables communicating risks, recommendations, and implementation priorities.
• Mentor senior team members and staff through technical guidance, quality reviews, coaching, and career development.
• Support business development, including proposal development, client presentations, solution design, and identification of follow-on consulting opportunities.
• Contribute to continuous improvement of the firm’s Governance, Risk, and Compliance (GRC) methodologies, templates, accelerators, and service offerings.

Benefits

• Medical, dental, vision, life, AD&D, and disability insurance.
• 401(k) retirement plan and 529 education savings plan.
• Flexible spending and health savings accounts.
• Accident, critical illness, and hospital indemnity insurance.
• Legal insurance and pet insurance.
• Employee Assistance Program, fitness and wellness benefits, and other firm benefits.
• Paid holidays, vacation, and sick time.
• Bonus eligibility when applicable.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager