Guidehouse logo
Guidehouse

Solving big problems, building trust in society, and empowering our clients to shape the future.

IT Audit & Compliance Analyst – Federal Cybersecurity Frameworks

Security EngineerSecurity EngineerFull TimeRemoteSeniorTeam 10,001+Since 2018H1B SponsorCompany SiteLinkedIn

Location

District Of Columbia

Posted

1 day ago

Salary

$98K - $163K / year

Seniority

Senior

Bachelor Degree3 yrs expEnglishCloudCyber Security

Job Description

• Guidehouse is seeking an IT Audit & Compliance professional to help our client at a large federal agency pursue and maintain compliance with federal cybersecurity frameworks. • This role focuses on audit preparation and coordination. The candidate will: • Coordinate internal and external audit activities across federal information systems, ensuring teams, schedules, evidence, and documentation remain audit‑ready. • Prepare, maintain, and organize assessor‑ready artifacts including SSPs, control narratives, SOPs, POA&Ms, continuous monitoring reports, and structured evidence packages. • Interpret and apply requirements from federal cybersecurity and audit frameworks, including: NIST SP 800‑53 (security and privacy controls), NIST SP 800‑37 (RMF), NIST SP 800‑171 (CUI), FISMA, FISCAM, OMB Circular A‑123, FedRAMP, and adjacent frameworks such as SOC 1/2, HIPAA, the Privacy Act, and IRS Publication 1075. • Support audit readiness activities by coordinating evidence collection with engineering, ISSO/ISSM, infrastructure, cloud, and application teams. • Track audit findings, maintain POA&M items, and facilitate remediation progress across technical and business teams. • Translate technical implementations into clear, assessor‑ready documentation through strong technical writing and stakeholder coordination. • Draft and refine policies, procedures, and control narratives, and coordinate teams through internal audits, readiness assessments, and corrective action plans.

Job Requirements

  • Must be able to OBTAIN and MAINTAIN a Federal or DoD "PUBLIC TRUST"; candidates must obtain approved adjudication of their PUBLIC TRUST prior to onboarding with Guidehouse.
  • Candidates with an ACTIVE PUBLIC TRUST or SUITABILITY are preferred.
  • Bachelor’s degree in information systems, Cybersecurity, Computer Science, Accounting/IS Audit, or a discipline related to this project.
  • Three (3) or more years of IT Audit & Compliance experience.
  • Experience implementing or assessing NIST SP 800‑53 control requirements in production environments (cloud and/or on‑prem).
  • Knowledge of federal cybersecurity and audit frameworks. (This could include NIST SP 800‑37 (RMF), NIST SP 800‑171, FISMA, FISCAM, OMB Circular A‑123, or FedRAMP.)
  • Demonstrated ability to create accurate, assessor‑ready documentation (This could include: SSPs, procedures/SOPs, control narratives, POA&Ms, ConMon reporting, evidence packages).
  • Preference will be given to candidate's located within the DC Metropolitan area.

Benefits

  • Medical, Rx, Dental & Vision Insurance
  • Personal and Family Sick Time & Company Paid Holidays
  • Position may be eligible for a discretionary variable incentive bonus
  • Parental Leave and Adoption Assistance
  • 401(k) Retirement Plan
  • Basic Life & Supplemental Life
  • Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
  • Short-Term & Long-Term Disability
  • Student Loan PayDown
  • Tuition Reimbursement, Personal Development & Learning Opportunities
  • Skills Development & Certifications
  • Employee Referral Program
  • Corporate Sponsored Events & Community Outreach
  • Emergency Back-Up Childcare Program
  • Mobility Stipend

Related Categories

Related Job Pages

More Security Engineer Jobs

Security Engineer1 day ago
Full TimeRemoteTeam 51-200Since 2020H1B Sponsor

The engineer will act as the essential bridge between security and engineering teams, ensuring security is deeply integrated into development processes by participating in RFCs, PRDs, and code reviews. Key duties include providing adversarial threat analysis on features, taking ownership of code vulnerabilities, managing Cloudflare/WAF controls, and uplifting the SIEM system.

Google Cloud PlatformKubernetesTerraformWAFSIEMCode ReviewApplication SecurityThreat Modeling
United States
$195K - $210K / year
Security Engineer1 day ago
Full TimeRemoteTeam 51-200H1B No Sponsor

Cyber Security Specialist supporting NETT Warrior Project with PEO Soldier

Cyber Security
United States
Full TimeRemoteTeam 10,001+Since 1937H1B No Sponsor

Director managing AWS cloud security operations at Caesars Entertainment

AWSCloudFirewallsPythonTerraform
United States
Full TimeRemoteTeam 10,001+Since 1937H1B No Sponsor

Specialist Engineer designing and deploying enterprise-level Cybersecurity solutions at Caesars Entertainment

CloudCyber SecuritySwitchingTCP/IP
United States