IT Control Assessment Manager

Kearney & Company is seeking an IT Control Assesment Manager to join our growing firm! Responsibilities include but not limited to: This role is responsible for leading

IT A-123

controls assessment, partnering with federal clients to strengthen IT governance, improve technology risk management, modernize internal control environments, and support regulatory and compliance initiatives. The Manager will support consulting engagements focused on IT risk, financial systems controls, cybersecurity governance, compliance, and remediation while also supporting internal IT audit and control assessment activities when required. This position requires a client-focused professional who can balance strategic advisory services with hands-on delivery, build trusted relationships, and lead teams in solving complex technology and compliance challenges.

• Perform and oversee IT control assessments, including IT General Controls (ITGCs), Business Process Application Controls (BPACs), internal IT audits, and

OMB A-123

evaluations.

• Facilitate workshops, walkthroughs, risk assessments, and client meetings to evaluate business processes, system controls, and technology risks.
• Assess technology risks and identify practical recommendations that improve security, compliance, operational efficiency, and business resilience.
• Partner with client executives, business stakeholders, system owners, and implementation teams to develop sustainable solutions for identified control deficiencies.
• Collaborate with system integrators and client leadership to develop actionable remediation strategies, Plans of Action and Milestones (POA&Ms), and long-term control improvements.
• Review remediation activities and provide guidance to ensure corrective actions effectively address root causes and satisfy compliance requirements.
• Support financial system modernization, ERP implementations, cloud migrations, and digital transformation initiatives by integrating governance, risk, and control considerations throughout the project lifecycle.
• Develop executive-ready presentations, assessment reports, and client deliverables that clearly communicate risks, recommendations, and implementation priorities.
• Mentor seniors and staffing by providing technical guidance, quality reviews, coaching, and career development.
• Support business development activities, including proposal development, client presentations, solution design, and identification of follow-on consulting opportunities.
• Contribute to the continuous improvement of the firm's Governance, Risk, and Compliance (GRC) methodologies, templates, accelerators, and service offerings
  

Required Qualifications:

• Minimum 6 years experience in IT Audit, Internal Controls Assessment, performing IT compliance and security assessments or related audit management, remediation, and governance and policy support for external IT security assessments
  
• BS in Information Technology or a related field
  
• Minimum 2 years of federal government experience
  
• Minimum 2 years of external assessment workpaper writing experience, under CIGIE or GAGAS fieldwork requirements
  
• Professional communication skills and clear business writing
  
• Must have an in depth understanding of IT general and application controls.
  
• Ability to work onsite in CampSprings, MD 5 days a week
  
• Ability to obtain and maintain US Suitability clearance (Requires US Citizenship)
  

Preferred Qualifications:

• Highly preferred professional certification:

CPA, CISSP

• Preferred professional certification:

CISA, CGFM

• DHS experience
  
• Cybersecurity; FISCAM; FISCAM Remediation
  
• FISMA Audit; FISMA Remediation
  
• Internal Control Support Services (A-123)
  
• IT Risk Assessment Support
  
• OMB Circular A-123
  

SSAE 18/SOC

I/Service Provider Audit