IT Security Auditor, Senior Consultant

Salary: $85,000 - 125,000 per year Requirements:

• We require an active and maintained TS/SCI Federal or DoD security clearance with a counterintelligence (CI) polygraph.
• We require a bachelors degree in a technical or business discipline.
• We require 3+ years of experience in IT consulting.
• We expect experience working with federal government clients, including senior-level stakeholders.
• We expect knowledge of federal information security and assurance laws, requirements, and guidance, including FISMA, NIST SP 800, and FISCAM.
• Preferred qualifications include a relevant certification such as CISA or CISM.
• Preferred qualifications include experience with IT risk and controls through IT audits, IT controls assessments, or IT security reviews.
• Preferred qualifications include working knowledge of federal information assurance laws, regulations, and guidance.
• Preferred qualifications include experience performing FISMA, OMB Circular A-123, or similar internal control assessments.
• Preferred qualifications include experience with access and account management principles, contingency planning, configuration management, and audit logging and monitoring.

• We lead stakeholder engagement and technical delivery for IT controls assessments and program evaluations supporting federal agencies.
• We assess IT controls using industry guidance and leading practices.
• We interview and discuss findings with client stakeholders, including ISSOs and system administrators.
• We review and analyze artifacts such as system security plans, SOPs, audit logs, configuration scans, and vulnerability scans to support testing.
• We evaluate the design and effectiveness of IT controls against federal requirements, industry guidance, and best practices.
• We document testing results in a clear, consistent, and high-quality format.
• We summarize and present assessment results to client stakeholders, including senior leadership.
• We analyze control weaknesses, determine root causes, and develop remediation plans.
• We provide subject matter expertise on a broad range of IT security and assurance topics.
• We respond to ad hoc IT security requests from client personnel.
• We plan and carry out day-to-day IT assessment and evaluation activities independently and as part of the team.
• We mentor junior team members on daily IT controls testing responsibilities.

• Support
• Security

More:

We are Guidehouse, a technology consulting team supporting federal agencies with IT controls assessments and program evaluations. This role offers competitive compensation and a flexible, comprehensive benefits package, including medical, Rx, dental and vision insurance, paid sick time and holidays, parental leave and adoption assistance, a 401(k) retirement plan, life and disability coverage, HSA and FSA options, student loan paydown, tuition reimbursement, learning and certification opportunities, employee referral rewards, corporate events, community outreach, emergency back-up childcare, and a mobility stipend. Travel is up to 10%, and the position is based on an active top secret SCI clearance with polygraph. Guidehouse is an equal opportunity employer.

last updated 36 week of 2026