K

Kearney and Co.

Government-focused financial management services

IT Risk Consulting Manager

Risk, Regulatory & Legal AdvisoryPosted on Nov 9
Full-timeWashington, DC, USA

About the Job

Requirements

  • A bachelor's degree from an accredited college or university is required.
  • At least 4 years of experience in IT risk consulting, technology advisory, internal IT audit, IT compliance, or related consulting services is required.
  • Experience advising clients on improving and maturing IT governance, risk management, and internal control environments is required.
  • Experience leading IT control assessments, internal audits, or compliance evaluations involving enterprise applications, ERP systems, cloud technologies, or financial systems is required.
  • A strong understanding of IT General Controls (ITGCs), application controls, technology risk management, and control frameworks is required.
  • Experience working directly with client stakeholders, presenting recommendations, and managing consulting engagements is required.
  • Strong written and verbal communication skills, including the ability to translate technical concepts into business-focused recommendations, are required.
  • The ability to manage multiple client engagements, priorities, and project teams in a consulting environment is required.
  • The ability to work onsite at client locations throughout the Washington, DC metropolitan area is required.
  • The ability to obtain and maintain a U.S. security clearance is required; U.S. citizenship is required.

Responsibilities

  • Support consulting engagements that help clients strengthen IT governance, risk management, and internal control environments across enterprise applications, cloud platforms, and business systems.
  • Advise clients on designing, implementing, and maturing IT controls that support regulatory compliance, operational effectiveness, and organizational objectives.
  • Perform and oversee IT control assessments, including IT General Controls (ITGCs), Business Process Application Controls (BPACs), internal IT audits, and OMB A-123 evaluations.
  • Assess technology risks and identify practical recommendations that improve security, compliance, operational efficiency, and business resilience.
  • Partner with client executives, business stakeholders, system owners, and implementation teams to develop sustainable solutions for identified control deficiencies.
  • Collaborate with system integrators and client leadership to develop actionable remediation strategies, Plans of Action and Milestones (POA&Ms), and long-term control improvements.
  • Review remediation activities and provide guidance to ensure corrective actions address root causes and satisfy compliance requirements.
  • Support financial system modernization, ERP implementations, cloud migrations, and digital transformation initiatives by integrating governance, risk, and control considerations throughout the project lifecycle.
  • Facilitate workshops, walkthroughs, risk assessments, and client meetings to evaluate business processes, system controls, and technology risks.
  • Develop executive-ready presentations, assessment reports, and client deliverables that communicate risks, recommendations, and implementation priorities.
  • Provide technical guidance, quality reviews, coaching, and career development to senior staff.
  • Support business development activities, including proposal development, client presentations, solution design, and identification of follow-on consulting opportunities.
  • Contribute to continuous improvement of the firm's Governance, Risk, and Compliance (GRC) methodologies, templates, accelerators, and service offerings.

Desired Qualifications

  • At least one professional certification such as CISA, CISSP, CRISC, CGEIT, Security+, CPA, or equivalent is preferred.
  • Experience supporting OMB A-123 IT evaluations within federal agencies is preferred.
  • Experience with Oracle, Oracle Cloud ERP, or Oracle Federal Financials business applications is preferred.
  • Experience supporting cloud governance and security within AWS, Azure, Oracle Cloud Infrastructure (OCI), or Google Cloud Platform is preferred.
  • Experience implementing or administering Governance, Risk, and Compliance (GRC) platforms such as ServiceNow GRC, Diligent HighBond, or Archer is preferred.
  • Experience supporting FISMA, the NIST Cybersecurity Framework, NIST SP 800-53, FedRAMP, or related federal compliance initiatives is preferred.
  • A bachelor's degree in information systems, computer science, accounting, business, cybersecurity, or a related field from an accredited college or university is preferred.

About the Company

Kearney and Co.

Government-focused financial management services

Kearney & Co. provides financial management services to the U.S. government. It helps improve the efficiency and effectiveness of government financial operations, increases accountability and compliance with laws and guidance, and protects funds from fraud, waste, and abuse. The firm works by offering targeted CPA services to Cabinet-level departments and other agencies, drawing on expertise from its Alexandria, Virginia headquarters and satellite offices to support a wide range of government programs. It differentiates itself by being the largest CPA firm focused exclusively on the government, offering deep domain knowledge, a dedicated government-focus culture, and a track record of serving federal agencies. The goal is to make government operations more effective and transparent by delivering reliable financial management, audits, advisory, and compliance services.

Company size
501-1,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Alexandria, VA
Founded
1985

Recently Posted Jobs

Explore more opportunities at Kearney and Co.

See more jobs