Guidehouse
ITRiskandControlsManager
Neural analysis suggests this role is
optimal for Senior candidates.
“IT Risk and Controls Manager at Guidehouse. Skills: IT Risk and Controls, IT controls audit/assessments, remediation, internal controls, OMB Circular A-123, FISCAM. Managing and performing rigorous audits/assessments of IT controls using industry-standard guidance and leading practices. Managing and performing walkthrough interviews and maintaining communication with a variety of client stakeholders, including system personnel such as system and database administrators”
What You'll Achieve.
support clients internally as a consultant rather than as an external auditor; provide input regarding audit readiness; promote awareness and understanding of OMB A-123 and internal controls
Industry & Context.
analyzing known IT control weaknesses; identify root causes; develop detailed, robust remediation plans
Up to 10% Travel, Ability to Obtain Public Trust, US Citizenship and must be able to OBTAIN and MAINTAIN a Federal or DoD "PUBLIC TRUST", Candidates with an ACTIVE PUBLIC TRUST or SUITABILITY are preferred
What They're Looking For.
Must Have
SIX (6) or more years’ experience in IT controls, audit, assessment, and/or remediation, Bachelor's Degree, US Citizenship and must be able to OBTAIN and MAINTAIN a Federal or DoD "PUBLIC TRUST"
Nice to Have
Master's Degree, Certified Information Systems Auditor (CISA) certification, Candidates with an ACTIVE PUBLIC TRUST or SUITABILITY are preferred
What You'll Do.
Managing and performing rigorous audits/assessments of IT controls using industry-standard guidance and leading practices
Managing and performing walkthrough interviews and maintaining communication with a variety of client stakeholders
including system personnel such as system and database administrators
and analyzing a variety of artifacts to assist in executing IT controls testing such as security plans
and system configuration settings.
Evaluating the design and operating effectiveness of IT controls using provided artifacts
industry-standard guidance
and professional judgment.
Professionally documenting the results of IT controls test work in a consistent and high-quality manner that would allow a reviewer to repeat the test and reach the same conclusion.
Summarizing and communicating IT controls assessment results to a variety of client stakeholders
including senior leadership personnel
and managing day-to-day activities of IT controls assessments individually and for the team.
Working with client personnel to understand and analyze known IT control weaknesses
robust remediation plans.
Providing subject matter expertise to client personnel on all matters relating to IT controls and responding to ad-hoc IT controls requests from client personnel
Developing documents to support internal control assessment planning decisions and control identification.
Supporting the development of corrective action plans to resolve material weaknesses
significant deficiencies
and control deficiencies.
Reviewing financial system modernization production environment functionality and application controls to provide input regarding audit readiness.
Assessing incremental financial system modernization efforts as well as in-production and in-development environments with regards to audit readiness and future risks
Preparing presentations
standard operating procedures
frequently asked questions
and white papers that effectively support organizational efforts to promote awareness and understanding of OMB A-123 and internal controls.
How You'll Work.
Team & Collaboration
support stakeholder engagement; working directly with clients and other organizational stakeholders; maintaining communication with a variety of client stakeholders; Summarizing and communicating IT controls assessment results to a variety of client stakeholders, including senior leadership personnel; Working with client personnel to understand and analyze known IT control weaknesses; Providing subject matter expertise to client personnel; responding to ad-hoc IT controls requests from client personnel
Communication Scope
support stakeholder engagement; maintaining communication with a variety of client stakeholders; Summarizing and communicating IT controls assessment results to a variety of client stakeholders, including senior leadership personnel; Providing subject matter expertise to client personnel; Preparing presentations, briefing materials, standard operating procedures, frequently asked questions, guides, and white papers
Process & Methodology
Managing and performing rigorous audits/assessments of IT controls, Managing and performing walkthrough interviews, Planning, executing, and managing day-to-day activities of IT controls assessments individually and for the team., develop detailed, robust remediation plans
Full Job Description
**_Job Family_ :** IT Risk & Controls Consulting ** _Travel Required_ :** Up to 10% **_Clearance Required_ :** Ability to Obtain Public Trust ** _What You Will Do_ :** The IT Risk and Controls Managing Consultant will support stakeholder engagement and technical delivery for efforts supporting a Department of Homeland Security (DHS) client with IT controls audit/assessments, remediation, and other related support. The client is responsible for coordinating and monitoring internal controls for the organization, including performing assessments in accordance with OMB Circular A-123, the FISCAM, and assisting other program offices with remediation and other related internal controls tasks. This is an ideal role for someone with an IT audit background who is looking to utilize their skills to support clients internally as a consultant rather than as an external auditor. The IT Risk and Controls Managing Consultant will have a role in working directly with clients and other organizational stakeholders to support IT internal control efforts, including audits/assessments, remediation, and other ad-hoc efforts. Day-to-day tasks include some or all of the following: * Managing and performing rigorous audits/assessments of IT controls using industry-standard guidance and leading practices * Managing and performing walkthrough interviews and maintaining communication with a variety of client stakeholders, including system personnel such as system and database administrators * Requesting, obtaining, reviewing, and analyzing a variety of artifacts to assist in executing IT controls testing such as security plans, SOPs, system screenshots, and system configuration settings. * Evaluating the design and operating effectiveness of IT controls using provided artifacts, industry-standard guidance, leading practices, and professional judgment. * Professionally documenting the results of IT controls test work in a consistent and high-quality manner that would allow a reviewer to repeat
Applying for this IT Risk and Controls Manager role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Workday
- Workday has a multi-step form — save your progress after every section.
- "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
- Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
- Job requisition numbers are useful when following up with HR by email.
ANONYMOUS · UNFILTERED
What do employees actually say about Guidehouse?
Real rants from real employees. Read before you apply.