IT Risk and Controls Consultant
Core
Support DHS clients with IT controls audit/assessments, remediation, and internal control monitoring in compliance with OMB Circular A-123 and FISCAM.
Role type
Senior IC IT Risk and Controls Consultant
Builds
IT control assessments, remediation plans, and audit readiness documentation for federal clients
Domain
Federal IT security and internal controls
Required skills
IT audit, IT controls assessment, remediation planning, walkthrough interviews, artifact analysis, root cause analysis, regulatory compliance (OMB A-123, FISCAM), documentation, stakeholder communication
Preferred skills
CISA certification, federal information assurance laws knowledge, access management, segregation of duties, audit logging, configuration management, change management, contingency planning
Technologies
DISA STIGs, CIS benchmarks, audit log aggregation tools
Responsibilities
Perform rigorous audits/assessments of IT controls using industry-standard guidance; conduct walkthrough interviews and analyze artifacts like security plans and SOPs; evaluate design and operating effectiveness of IT controls; document test results and communicate findings to senior leadership; develop remediation plans for control weaknesses; support financial system modernization audit readiness; prepare briefing materials and white papers on internal controls
Seniority
Senior, hands-on IC
