Certified Public Accountant (CPA), Computer Security, Consulting, Cost Estimates, Document Management, Documentation Review, FISMA - Federal Information Security Management Act, Federal Bureau of Investigation (FBI), Financial Audit, Government, Government Accounting, Information/Data Security (InfoSec), Internal Audit, Internet Security, Leadership, Nonprofit, Risk Analysis, Risk Management Framework (RMF), Security Analysis, Willing to Travel
JOB TITLE: Governance & Controls Assessor
LOCATION: Tallahassee, FL (North Florida coverage)
TRAVEL: Regional travel within North Florida to assigned client sites
JOB TYPE: Contract / Engagement-Based (Government Consulting Services)
CONTRACT RATE BASIS: Consultant tier
JOB SUMMARY
Judit Inc. is seeking a Governance & Controls Assessor to execute governance and controls fieldwork on a large-scale government IT security risk assessment. This role applies audit-grade evidence standards to a defined subset of client entities in coordination with senior governance leadership.
KEY RESPONSIBILITIES
- Conduct governance and controls interviews and documentation review, focused on organizational governance and information protection process areas
- Support regional field coverage, applying the same uniform scoring criteria used across the broader assessment program
- Assist with per-entity remediation cost estimating inputs under the direction of senior governance leadership
- Maintain evidence and workpaper standards consistent with audit-grade practice
REQUIRED QUALIFICATIONS
- Background in governmental or not-for-profit auditing, internal controls review, or compliance assessment
- Comfort working within a structured, framework-driven assessment methodology
- Willingness and ability to pass Level 2 background screening (Livescan/FBI) prior to accessing confidential information
- Enrollment in / compliance with E-Verify requirements
PREFERRED QUALIFICATIONS
- CPA candidate status, active CPA license, or B.B.A. in Accounting with governmental audit exposure
- Prior exposure to risk management framework concepts, FISMA, or FedRAMP (training available for strong audit candidates without direct cybersecurity background)