IT Security Auditor, Senior Consultant

Salary: $85,000 - 125,000 per year Requirements: We require an active and maintained TS/SCI Federal or DoD security clearance with a counterintelligence (CI) polygraph. We require a bachelors degree in a technical or business discipline. We require 3+ years of experience in IT consulting. We expect experience working with federal government clients, including senior-level stakeholders. We expect knowledge of federal information security and assurance laws, requirements, and guidance, including FISMA, NIST SP 800, and FISCAM. Preferred qualifications include a relevant certification such as CISA or CISM. Preferred qualifications include experience with IT risk and controls through IT audits, IT controls assessments, or IT security reviews. Preferred qualifications include working knowledge of federal information assurance laws, regulations, and guidance. Preferred qualifications include experience performing FISMA, OMB Circular A-123, or similar internal control assessments. Preferred qualifications include experience with access and account management principles, contingency planning, configuration management, and audit logging and monitoring. Responsibilities: We lead stakeholder engagement and technical delivery for IT controls assessments and program evaluations supporting federal agencies. We assess IT controls using industry guidance and leading practices. We interview and discuss findings with client stakeholders, including ISSOs and system administrators. We review and analyze artifacts such as system security plans, SOPs, audit logs, configuration scans, and vulnerability scans to support testing. We evaluate the design and effectiveness of IT controls against federal requirements, industry guidance, and best practices. We document testing results in a clear, consistent, and high-quality format. We summarize and present assessment results to client stakeholders, including senior leadership. We analyze control weaknesses, determine root causes, and develop remediation plans. We provide subject matter expertise on a broad range of IT security and assurance topics. We respond to ad hoc IT security requests from client personnel. We plan and carry out day-to-day IT assessment and evaluation activities independently and as part of the team. We mentor junior team members on daily IT controls testing responsibilities. Technologies: Support Security More: We are Guidehouse, a technology consulting team supporting federal agencies with IT controls assessments and program evaluations. This role offers competitive compensation and a flexible, comprehensive benefits package, including medical, Rx, dental and vision insurance, paid sick time and holidays, parental leave and adoption assistance, a 401(k) retirement plan, life and disability coverage, HSA and FSA options, student loan paydown, tuition reimbursement, learning and certification opportunities, employee referral rewards, corporate events, community outreach, emergency back-up childcare, and a mobility stipend. Travel is up to 10%, and the position is based on an active top secret SCI clearance with polygraph. Guidehouse is an equal opportunity employer. last updated 36 week of 2026