IT Audit & Compliance Analyst (Federal Cybersecurity Frameworks)

About the role

Guidehouse is seeking an IT Audit & Compliance professional to support a large federal agency in maintaining compliance with federal cybersecurity frameworks.

Responsibilities

• Cook up internal and external audit activities across federal information systems, making sure teams, schedules, evidence, and documentation stay audit-ready.
• Prepare, maintain, and organize assessor-ready artifacts like Security and Privacy Controls (NIST SP 800-53), Risk Management Framework (NIST SP 800-37), Controlled Unclassified Information (NIST SP 800-171), FISMA, FISCAM, OMB Circular A-123, FedRAMP, and more.
• Interpret and apply federal cybersecurity and audit frameworks, including NIST SP 800-53, NIST SP 800-37, NIST SP 800-171, FISMA, FISCAM, OMB Circular A-123, FedRAMP, and others.
• Create accurate, assessor-ready documentation, including Security Plans of Action and Milestones (POA&Ms), Continuous Monitoring Reports (ConMon), evidence packages, and more.
• Support audit readiness by coordinating evidence collection with engineering, ISSO/ISSM, infrastructure, cloud, and application teams.
• Track audit findings, maintain POA&M items, and facilitate remediation progress across technical and business teams.
• Translate technical implementations into clear, assessor-ready documentation through strong technical writing and stakeholder coordination.
• Draft and refine policies, procedures, and control narratives, and coordinate teams through internal audits, readiness assessments, and corrective action plans.

Requirements

• Must be able to OBTAIN and MAINTAIN a Federal or DoD "PUBLIC TRUST" clearance.
• Three (3) or more years of IT Audit & Compliance experience.
• Experience implementing or assessing NIST SP 800-53 control requirements in production environments (cloud and/or on-prem).
• Knowledge of federal cybersecurity and audit frameworks, including NIST SP 800-53, NIST SP 800-37, NIST SP 800-171, FISMA, FISCAM, OMB Circular A-123, FedRAMP, and others.
• Ability to create accurate, assessor-ready documentation, including SSPs, procedures/SOPs, control narratives, POA&Ms, ConMon reporting, evidence packages, and more.

Qualifications

• Bachelor's degree in information systems, Cybersecurity, Computer Science, Accounting/IS Audit, or a related field.
• US Citizenship is required.
• Located within the DC Metropolitan area is preferred.

Skills

• Strong written and verbal communication skills.
• Ability to work across diverse teams and translate technical concepts into assessor-friendly language.

Benefits

The annual salary range for this position is $98,000.00-$163,000.00. Benefits include Medical, Rx, Dental & Vision Insurance, Personal and Family Sick Time & Company Paid Holidays, Parental Leave and Adoption Assistance, 401(k) Retirement Plan, Basic Life & Supplemental Life, Health Savings Account, and a comprehensive total rewards package.