Cybersecurity Audit Analyst

Applied Aerospace; Huntsville (AL); On-site; USD 70,000 - 90,000; Full time

Job summary

Applied Aerospace is seeking a Cybersecurity Analyst (GRC) in Huntsville, Alabama. The role entails supporting the organization’s Governance, Risk, and Compliance program, maintaining cybersecurity documentation, and managing compliance efforts without direct supervisory responsibilities.

The ideal candidate will have a Bachelor’s degree in Cybersecurity or related field and 2-5 years of experience in the field. Responsibilities include coordinating audit activities, maintaining security protocols, and tracking compliance requirements.

Engagement in various compliance initiatives and collaboration with operational teams is expected, making this a vital role within the organization.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, or related field.
• 2-5 years of experience in cybersecurity, compliance, or GRC related functions.
• Experience supporting audits and compliance programs.

Responsibilities

• Perform Application Portfolio maintenance related to cybersecurity.
• Coordinate enterprise technology and cybersecurity invoices.
• Maintain cybersecurity policies, procedures, and standards.
• Prepare for and support internal and external audits.
• Assist in conducting risk assessments and documenting results.

Skills

Bachelor’s degree in Cybersecurity, Information Systems, or related field

2-5 years of experience in cybersecurity, compliance, or GRC related functions

Experience supporting audits and compliance programs

Working knowledge of cybersecurity frameworks

Strong organizational skills and attention to detail

Strong documentation and recordkeeping skills

Experience with CMMC or Department of Defense (DoD) compliance requirements

Experience in manufacturing or regulatory industry environment

Relevant certifications (e.g., Security+, CISA, CISM, or similar)

Experience with GRC or compliance management tools

Familiarity with CMMC, NIST 800-171, SOX 404

SOX compliance experience

Experience with Risk Management Frameworks

Education

Bachelor’s degree in Cybersecurity or equivalent experience

Job description

OVERVIEW OF POSITION

The Cybersecurity Analyst (GRC) is responsible for supporting the organization’s Governance, Risk, and Compliance (GRC) program. This role focuses on maintaining cybersecurity documentation, coordinating audit activities, supporting regulatory compliance efforts, and managing administrative functions of the cybersecurity program. This is an individual contributor role with no direct supervisory responsibilities.

ESSENTIAL JOB FUNCTIONS

• Perform Application Portfolio maintenance including various attributes related to enterprise software lifecycle management and cybersecurity lifecycle attributes.
• Assist with control mapping and data maintenance related to enterprise applications, software, and systems.
• Coordinate project related activities, to include technology and compliance projects.
• Coordinate enterprise technology and cybersecurity invoices, approvals, and oversight including financial coding and cost tracking for expenditures.

GOVERNANCE AND COMPLIANCE

• Maintain cybersecurity policies, procedures, and standards in alignment with applicable frameworks.
• Track compliance requirements and ensure documentation is current and complete.
• Assist in implementation and monitoring of security protocols.
• Support ongoing compliance initiatives and reporting requirements.

AUDIT COORDINATION AND SUPPORT

• Prepare for and support internal and external audits.
• Coordinate audit requests, including collection and organization of required documentation.
• Maintain audit artifacts and ensure readiness for review.
• Track audit findings and support remediation efforts through closure.

RISK MANAGEMENT

• Assist in conducting risk assessments and documenting results.
• Maintain and update risk registers.
• Track mitigation plans and follow up on remediation activities.
• Support third-party and vendor risk management processes.

CYBERSECURITY PROGRAM ADMINISTRATION

• Maintain records related to access reviews, training compliance, and security activities.
• Coordinate enterprise technology and cybersecurity invoices, approvals, and oversight including financial coding and cost tracking for expenditures.
• Support documentation and tracking security incidents.
• Manage administrative workflows related to the cybersecurity program.
• Ensure proper retention and organization of compliance documentation.

CROSS-FUNCTIONAL SUPPORT

• Collaborate with BTS, Engineering, Quality, and Operational teams to support compliance and security initiatives.
• Provide guidance on cybersecurity policies and procedures as needed.
• Support continuous improvement of cybersecurity and compliance processes.

SKILLS

• Experience: Bachelor’s degree in Cybersecurity, Information Systems, or related field, or equivalent experience.
• 2-5 years of experience in cybersecurity, compliance, or GRC related functions.
• Experience supporting audits and compliance programs.
• Working knowledge of cybersecurity frameworks.
• Strong organizational skills and attention to detail.
• Strong documentation and recordkeeping skills. Ability to manage multiple tasks and meet deadlines.
• Experience with CMMC or Department of Defense (DoD) compliance requirements.
• Experience in manufacturing or regulatory industry environment.
• Relevant certifications (e.g., Security+, CISA, CISM, or similar).
• Experience with GRC or compliance management tools.
• Experience or strong familiarity with CMMC, NIST 800-171, SOX 404, and/or related cybersecurity compliance requirements.
• SOX (Sarbanes‑Oxley Act) compliance experience and/or related compliance control mapping experience in a regulated environment preferred.
• Experience with Risk Management Frameworks and Risk Assessments preferred.

EEO STATEMENTS & LEGAL INFORMATION

Applied Aerospace & Defense (“AA&D”) is committed to equal employment opportunity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, veteran or military status, or any other characteristic protected by applicable federal, state, or local law.

Applicants who require reasonable accommodation for any part of the application or hiring process due to disability, medical condition, or other protected reason may contact the Human Resources Department. Requests will be reviewed in accordance with applicable law.

Due to the nature of our work and applicable U.S. export control laws, this position requires International Traffic in Arms Regulations (ITAR) eligibility. Only individuals who qualify as a “U.S. person” as defined by ITAR (U.S. citizens, U.S. permanent residents, refugees, or asylees), unless specified otherwise within this job description, are eligible for employment.