Consultant - Financial Management; FM IT Risk and Controls - Defense & Security - Campus

What You Will Do

Our 2026 Campus Defense & Security Financial Management (FM) IT Risk and Controls consultants help our clients within Defense & National Security optimize all elements of their financial management structure by transforming business processes, enhancing the efficiency of operations, improving transparency and performance management, promoting change management, and complying with Federal laws and regulations. Our new consultants will also build their professional and personal consulting skillsets while gaining a strong understanding of consulting within a financial capability.

Finance & Accounting Consulting

Up to 10%

Ability to Obtain Secret

• Performing rigorous assessments of IT controls using industry‑standard guidance and leading practices
• Performing walkthrough interviews and maintaining communication with a variety of client stakeholders, including system personnel such as system and database administrators
• Requesting, obtaining, reviewing, and analyzing a variety of artifacts to assist in executing IT controls testing such as security plans, SOPs, system screenshots, and system configuration settings
• Evaluating the design and operating effectiveness of IT controls using provided artifacts, industry‑standard guidance, leading practices, and professional judgement
• Professionally documenting the results of IT controls test work in a consistent and high‑quality manner that would allow a reviewer to repeat the test and reach the same conclusion
• Summarizing and communicating IT controls assessment results to a variety of client stakeholders, including senior leadership personnel
• Planning and executing day‑to‑day activities of IT controls assessments individually and for the team
• Working with client personnel to understand and analyze known IT control weaknesses, identify root causes, and develop detailed, robust remediation plans
• Providing subject‑matter expertise to client personnel on all matters relating to IT controls and responding to ad‑hoc IT controls requests from client personnel

• Assisting in business development activities, such as identifying potential client needs and ways Guidehouse can assist, developing proposals and white papers, participating in client and internal account meetings, and more
• Participating in Guidehouse’s programs for coaching and mentoring staff
• Assisting in the development of learning and development materials, courses, and presentations to help Guidehouse employees expand and strengthen their skills
• Support Guidehouse programs and initiatives for recruiting top talent to the company

• Must be able to obtain and maintain a Public Trust, Secret, or higher level of federal/government security clearance.
• US Citizenship is required for security clearance
• Completing a Bachelor’s degree between fall 2025 and summer 2026 from an accredited college or university
• Strong organizational and communication skills
• Interest in growing a career in Government/Federal/Defense and National Security consulting
• Ability to synthesize information quickly and learn new skills, view problems, apply a variety of analytical solutions, and participate in client‑facing discussions and meetings
• Ability to work in teams to produce high‑impact work products, reports, and other deliverables in a fast‑paced environment
• Willingness to utilize project management best practices within an organization to produce high quality deliverables in a timely manner

• An ACTIVE and MAINTAINED "SECRET" Federal or DoD security clearance; or higher‑level clearance
• Bachelor’s or Master’s degree specializing in Information Systems, Information Technology, Computer Information Systems, Business Information Technology, Computer Science, Accounting, Audit Readiness
• Certified Information Systems Auditor (CISA) Certification
• Knowledge of cybersecurity and privacy controls and regulations (e.g., NIST, FISMA, FISCAM, etc.)
• Familiarity with operating systems (e.g., Windows or UNIX), databases (e.g., Oracle, SQL) vulnerability management tools (e.g., Nessus), configuration management tools, and other tools that…