Manager - IT Controls

Job Location: 

This role is 100% remote.

Clearance:

Must be currently authorized to work in the United States on a full-time basis and have the ability to obtain a Public Trust Clearance.

Job Description:

In this position as an IT Controls Manager, you will lead the planning, testing, and evaluation of IT general and application controls in support of CMS’s annual OMB Circular A-123 and HHS financial assurance activities. In this position, you will also:

• Lead the annual IT risk scoping and planning process to identify high-risk systems and applications impacting financial reporting and data integrity.
• Map control objectives to CMS ARS and NIST frameworks (SP 800-53, 53A, and 30) and assess inherent, control, and fraud risks across CMS systems and contractors.
• Oversee documentation and design reviews of IT general and application controls, ensuring completeness of cycle memos, narratives, and control matrices.
• Develop and execute IT test plans in accordance with HHS A-123 and FISCAM guidance, validating remediation of prior-year findings and corrective actions.
• Analyze and categorize IT control deficiencies, support development of Corrective Action Plans (CAPs), and maintain tracking in alignment with HHS guidance.
• Prepare and present IT control reporting for CMS A-123 assurance, including risk summaries, CAP status, and findings for CMS and HHS leadership.
• Ensure quality and compliance of all IT audit work, fostering continuous improvement through streamlined testing, data analytics, and stakeholder collaboration.

Required Skills:

• Bachelor’s degree in Accounting, Finance, Business, or a related field.
• 7 years of progressive IT audit or IT risk management experience.
• 3 years of experience supporting a Department of Health and Human Services (HHS) Operating Division.
• Active Certified Information Systems Auditor (CISA) Certification.  

Desired Skills:

• Demonstrated expertise applying FISMA, FISCAM, FedRAMP, and NIST SP 800-53/53A frameworks.
• Proven experience evaluating IT controls within Medicare, Medicaid, or CHIP operational environments preferred.
• Experience supervising audit teams and coordinating with cross-functional stakeholders including contractors and Federal auditors.
• Strong analytical, problem-solving, and communication skills.
• Familiarity with OMB Circular A-123, Appendix A requirements and related assurance documentation.
• Experience developing and managing Corrective Action Plans (CAPs) for IT control deficiencies.
• Knowledge of CMS policies, HHS ARS, and related federal IT control standards.

At Blake Willson Group, we believe in transparency and fairness in compensation practices. For this position, we offer a competitive salary range of $130,000 to $160,000 in the United States. Your individual salary within this range will be determined by various factors, including but not limited to your education, experience, skills, and geographic location. We also provide a comprehensive Total Rewards package, which includes major medical benefits such as dental and vision coverage, a 401(k)-contribution plan, holiday and personal time off, professional development training & certification benefits, health & wellness subsidies, paid time off for community service, and more. We value your contributions and are committed to recognizing and rewarding your performance and the value you bring to our business.