IT Audit & Compliance Analyst (Federal Cybersecurity Frameworks)

**Job Family** **:**

IT Risk & Controls Consulting

**Travel Required** **:**

None

**Clearance Required** **:**

Ability to Obtain Public Trust

**What You Will Do:**
Guidehouse is seeking an IT Audit & Compliance professional to help our client at a large federal agency pursue and maintain compliance with federal cybersecurity frameworks. This role focuses on audit preparation and coordination. The candidate will:

+ Coordinate internal and external audit activities across federal information systems, ensuring teams, schedules, evidence, and documentation remain audit‑ready.
+ Prepare, maintain, and organize assessor‑ready artifacts including SSPs, control narratives, SOPs, POA&Ms, continuous monitoring reports, and structured evidence packages.
+ Interpret and apply requirements from federal cybersecurity and audit frameworks, including:
+ NIST SP 800‑53 (security and privacy controls), NIST SP 800‑37 (RMF), NI...