Wilshusen joined the GAO, the investigative arm of Congress, in 1997, and oversees its IT security investigations and audits of federal government agencies and programs. He is a frequent witness before Congressional panels, testifying on government IT security. A certified public accountant, certified internal auditor and certified information systems auditor, Wilshusen previous served as the controller for the North Carolina Department of Environment, Health and Natural Resources, and held senior auditing positions at Irving Burton Associates, a professional and technical services firm, and with the U.S. Army Audit Agency.