Partner/Principal

Key Responsibilities

• Serve as engagement Executive for annual FISMA evaluations performed for Offices of Inspector General, including assessments against the IG FISMA Reporting Metrics and NIST-based security control testing
• Serve as engagement Executive for SOC examinations and SOC readiness assessments for federal shared service providers
• Direct evaluations of IT general controls, application controls, access security, change management, configuration management, contingency planning, interfaces, system-generated reports, and data reliability
• Oversee technology risk assessments and testing aligned with applicable federal guidance, including NIST security standards, audit frameworks such as GAGAs and FISCAM, and agency-specific requirements
• Translate complex IT control, cybersecurity, and system risks into clear findings, practical recommendations, and corrective-action strategies for senior federal officials
• Lead IT audit activities related to federal financial statement audits from planning through report issuance, including risk assessments, internal control evaluations, substantive testing, and resolution of complex accounting and audit matters
• Integrate IT audit results with financial audit procedures to address system dependencies, automated controls, data integrity, and risks affecting financial reporting
• Apply data analytics, automation, and AI-enabled solutions to improve audit coverage, efficiency, and quality
• Maintain engagement quality, compliance with professional standards, and readiness for peer reviews, inspections, and other quality assessments
• Manage multidisciplinary engagement portfolios, staffing, budgets, client relationships, and delivery risks
• Own business development for Federal IT Audit services to include identifying and capturing opportunities, developing and leading multi-year pipeline, leading proposal response, orals presentation, and meeting year-over-year growth revenue targets
• Recruit, develop, and mentor IT audit professionals (to include development of pipeline managers, senior managers, and Executives responsible for leading and sustaining IT Audit services growth)

Required Qualifications

• Active CISA and/or CPA license in good standing; CISA or equivalent IT audit credential strongly preferred
• Bachelor’s degree in accounting, finance, information systems, or cybersecurity
• Minimum of 10 years in federal IT audit, technology assurance, experience
• Proven leadership of FISMA-related audits, assessments, or cybersecurity control reviews for federal agencies
• Strong knowledge of FISMA, NIST standards, FISCAM, IT general controls, application controls, and federal information security and technology risk requirements
• Demonstrated ability to assess system security, access controls, change and configuration management, contingency planning, automated controls, data integrity, and technology dependencies
• Substantial experience with federal financial statement audits and strong technical knowledge of federal accounting, auditing, financial reporting, internal control, and compliance requirements
• Ability to integrate IT audit findings with financial audit risks, procedures, conclusions, and reporting
• Experience managing complex engagements (particularly with CFO-Act level agencies) and multidisciplinary teams
• Strong executive communication, technical writing, and client relationship skills
• Demonstrated record of winning new federal work as capture lead, with established relationships across federal agencies (to include OIGs)
• Ability to obtain and maintain a federal security clearance, if required

Preferred Qualifications

• Additional credentials such as CISSP, CISM, PMP, CIA, or CFE and advance degree in relevant discipline
• Experience with CFO Act financial statement audits, the GAO/CIGIE Financial Audit Manual, Government Auditing Standards, and quality reviews
• Experience auditing cloud-hosted (FedRAMP) environments, federal shared service providers, and major federal financial systems
• Experience with pre-implementation system assessments and AI governance assessments