Partner/Principal

Castro & Co.•Alexandria, VA

About The Position

Castro & Company, LLC, a CPA firm dedicated exclusively to serving the U.S. Federal Government, is seeking an accomplished Partner/Principal to lead and grow the firm’s federal IT audit services within its IT practice. This executive will lead IT audits supporting federal financial statement audits (FISCAM), FISMA evaluations, and SOC examinations, and will be accountable for winning new work and building the team that delivers IT audit services. The role shapes the technical direction, quality, talent, client service, and growth of the firm’s specialized federal IT audit, cybersecurity assurance, and financial audit services. Compensation is competitive and includes benefits, commensurate with experience, qualifications, and leadership responsibilities.

Requirements

Active CISA and/or CPA license in good standing; a CISA or equivalent IT audit credential is strongly preferred.
Bachelor’s degree in accounting, finance, information systems, or cybersecurity.
Minimum of 10 years in federal IT audit or technology assurance experience.
Proven leadership of FISMA-related audits, assessments, or cybersecurity control reviews for federal agencies.
Strong knowledge of FISMA, NIST standards, FISCAM, IT general controls, application controls, and federal information security and technology risk requirements.
Demonstrated ability to assess system security, access controls, change and configuration management, contingency planning, automated controls, data integrity, and technology dependencies.
Substantial experience with federal financial statement audits and strong technical knowledge of federal accounting, auditing, financial reporting, internal control, and compliance requirements.
Ability to integrate IT audit findings with financial audit risks, procedures, conclusions, and reporting.
Experience managing complex engagements, particularly with CFO-Act-level agencies, and multidisciplinary teams.
Strong executive communication, technical writing, and client relationship skills.
Demonstrated record of winning new federal work as a capture lead, with established relationships across federal agencies, including OIGs.
Ability to obtain and maintain a federal security clearance, if required.

Nice To Haves

Additional credentials such as CISSP, CISM, PMP, CIA, or CFE, and an advanced degree in a relevant discipline.
Experience with CFO Act financial statement audits, the GAO/CIGIE Financial Audit Manual, Government Auditing Standards, and quality reviews.
Experience auditing cloud-hosted (FedRAMP) environments, federal shared service providers, and major federal financial systems.
Experience with pre-implementation system assessments and AI governance assessments.

Responsibilities

Serve as engagement Executive for annual FISMA evaluations performed for Offices of Inspector General, including assessments against IG FISMA Reporting Metrics and NIST-based security control testing.
Serve as engagement Executive for SOC examinations and SOC readiness assessments for federal shared service providers.
Direct evaluations of IT general controls, application controls, access security, change management, configuration management, contingency planning, interfaces, system-generated reports, and data reliability.
Oversee technology risk assessments and testing aligned with applicable federal guidance, including NIST security standards, audit frameworks such as GAGAS and FISCAM, and agency-specific requirements.
Translate complex IT control, cybersecurity, and system risks into clear findings, practical recommendations, and corrective-action strategies for senior federal officials.
Lead IT audit activities related to federal financial statement audits from planning through report issuance, including risk assessments, internal control evaluations, substantive testing, and resolution of complex accounting and audit matters.
Integrate IT audit results with financial audit procedures to address system dependencies, automated controls, data integrity, and risks affecting financial reporting.
Apply data analytics, automation, and AI-enabled solutions to improve audit coverage, efficiency, and quality.
Maintain engagement quality, compliance with professional standards, and readiness for peer reviews, inspections, and other quality assessments.
Manage multidisciplinary engagement portfolios, staffing, budgets, client relationships, and delivery risks.
Own business development for Federal IT Audit services, including identifying and capturing opportunities, developing and leading a multi-year pipeline, leading proposal responses and oral presentations, and meeting year-over-year growth revenue targets.
Recruit, develop, and mentor IT audit professionals, including pipeline managers, senior managers, and Executives responsible for leading and sustaining IT Audit services growth.