Job Title: IT Risk & Controls Audit Manager

Location: Tysons, VA and Arlington, VA (Onsite 3 days/week)Clearance: Must hold at least an interim Secret ClearanceContract: 3-month contract (onsite requirement)Pay Rate: $40–$55/hour

About the Role:Join a critical cross-functional Action, Assessment & Tasking Team (AAT) supporting environmental and disposal liability initiatives. The AAT unites personnel, resources, and information to rapidly assess situations, develop actionable plans, and deliver effective solutions faster than traditional approaches. This manager role is vital to evaluating and mitigating risks related to internal controls over financial reporting (ITAC/ITGC) and ensuring compliance with federal information assurance standards.

Key Responsibilities:

• Identify controls that mitigate ITAC/ITGC relevant risks.

• Leverage FISCAM and NIST RMF frameworks for testing, review, and advisory activities.

• Design and implement or independently test Tests of Design (TOD) and Tests of Effectiveness (TOE) for corrective actions addressing audit risks.

• Identify and assess IT inherent and detective risks related to internal controls.

• Develop Risk and Control Matrices (RACMs) to support financial statement audits.

• Conduct IT end-to-end process mapping for audit support.

• Review and evaluate issued audit findings (e.g., NFRs).

Required Skills:

• Deep knowledge of NIST RMF, NIST 800-53, FISCAM, DODI 8500, DODI 8510, SSAE-18 AT-C 320 standards.

• Proven experience designing and implementing or testing corrective actions for financial statement audit risks.

• Solid background in IT controls testing, process mapping, and controls assessment.

Preferred Skills (Nice to Have):

• Experience supporting Federal or DoD clients.

• Business process end-to-end process mapping experience.

• Experience performing federal audits with audit opinions or disclaimers of opinion.

• Experience evaluating SOC reports for audit support.

• Familiarity with DoD SSAE-18 AT-C examinations as a service auditor.

Minimum Qualifications:

• Education: Master’s Degree in Accounting, Finance, Information Technology, or Business Management OR CPA, CISA, PMP, CGFM, or CDFM certification.

• Experience:

  • Minimum 4 years in federal financial management.

  • Minimum 2 years of federal accounting experience.

Work Arrangement:

• Must work onsite at the Tysons, VA office or client site in the greater DC area at least 3 times a week.

Contract Details:

• Rate: $40–$55 per hour.

• Term: 3-month contract.

Ready to Join?This is a great opportunity to leverage your IT controls and federal audit experience to help drive rapid, high-impact outcomes. Candidates must hold at least an interim Secret Clearance.