IT and Cyber Risk Auditor Principal

General Dynamics Information Technology, Inc.; Las Cruces (NM); On-site; USD 111,000 - 150,000; Full time

Job summary

General Dynamics Information Technology, Inc. seeks an IT & Cyber Risk Auditor Principal to lead enterprise IT and cybersecurity risk assessments supporting national security missions. You will assess controls, identify gaps, and partner with cross-functional teams to strengthen risk posture.

You will evaluate IT general controls, cybersecurity controls, and risk management processes, while supporting audit reports and executive briefings across federal programs. TS/SCI with poly may be required.

Qualifications

• Bachelor’s degree or equivalent in a related field.
• 5+ years of progressive IT audits or cybersecurity risk experience.
• Current DoD directives and IAM Level II certifications or equivalent.

Responsibilities

• Lead IT and cybersecurity risk audits and assessments.
• Evaluate IT general controls, cybersecurity controls, and risk processes.
• Assess compliance with NIST RMF, FISMA, FedRAMP, ISO 27001.
• Document control gaps and remediation opportunities.
• Provide risk-based recommendations to leadership.
• Support audit reports and executive briefings.
• Coordinate with cross-functional teams to improve risk posture.
• Perform STIG and FISMA assessments and ATO activities.

Skills

Cyber Risks

Cybersecurity Controls

Cybersecurity Risk Management

Security Controls

Security Risk

Education

Bachelor’s degree or equivalent (Information Systems, Cybersecurity, Computer Science, Accounting, or related field)

DoD 8570/8140 IAM Level II or equivalent certification exposure

Tools

XACTA

ICD 503

NIST 800-83 rev4

Splunk

Security Center

Telos XACTA

McAfee EPO

Job description

Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret SCI + Polygraph Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: Cyber and IT Risk Management

Job Qualifications

• Skills: Cyber Risks, Cybersecurity Controls, Cybersecurity Risk Management, Security Controls, Security Risk
• Certifications: None
• Experience: 5 + years of related experience
• US Citizenship Required: Yes

Job Description

Your Impact Own your opportunity as an IT & Cyber Risk Auditor Principal at GDIT. You’ll lead enterprise-level IT and cybersecurity risk and compliance assessments that help secure the systems and data vital to our national security missions. At GDIT, the mission is our purpose, and our people are at the center of everything we do. As a trusted audit leader, you’ll evaluate cyber and IT controls, identify risk exposure, and influence remediation strategies while partnering with cross-functional teams to strengthen enterprise risk posture. Your work will have meaningful impact across federal government and defense programs.

What You’ll Do

• Lead and execute rigorous IT and cybersecurity risk audits and assessments
• Evaluate IT general controls, cybersecurity controls, and risk management processes
• Assess compliance with federal frameworks and guidance (e.g., NIST, RMF, FISMA, FedRAMP, ISO 27001)
• Identify and document control gaps, risk exposures, and areas for process improvement
• Provide risk-based recommendations and actionable insights to senior leadership and stakeholders
• Support preparation of audit reports and executive briefings
• Manage and execute system Certification and Accreditation processes, ensuring compliance with security controls and requirements outlined in agency policies.
• Collaborate with cybersecurity, IT, compliance, and program teams to drive remediation and sustainable improvements
• Participate in internal and external audit activities, including customer assessments
• Experience using XACTA data base applications and the ICD 503, NIST 800-83 rev4 policy
• Review monthly vulnerability scan reports and track and address weaknesses in plans as needed.
• Perform security system event analysis, investigation, and validation
• Provide incident response to classification spills, malware infection, misconfiguration exposure, internal inappropriate behavior and technical issue
• Perform Security Technical Implementation Guide (STIG) and Federal Information Security Management Act (FISMA) assessments and annual reporting
• Work and completing multiple Authority to Operate (ATO) security packages simultaneously

What You’ll Need to Succeed

• 5+ years of progressive experience to an intermediate level in IT audits, cybersecurity risk management, or information assurance
• Experience using XACTA data base applications and the ICD 503, NIST 800-83 rev4 policy
• Experience with Splunk, Security Center, Telos XACTA, and MacAfee EPO
• Expertise with cybersecurity and IT control frameworks and compliance requirements
• Experience conducting complex IT and cybersecurity audits in government or federal contracting environments
• Experience with cloud security risk assessments and modern technologies
• Clear and effective communication skills with the ability to influence technical and executive audiences
• Ability to multi-task, prioritize, and re-prioritize work in a fast-paced environment
• Ability to learn an application environment in order to update or create supported security documentation

Qualifications

• Bachelor’s degree or equivalent military training in Information Systems, Cybersecurity, Computer Science, Accounting, or related field
• Maintain certification in accordance with DoW Directive 8140.01 Cyberspace Workforce Management requirements
• Applicable certifications include: SecurityX / CASP+, CGRC/CAP, GSEC, GSNA, Security+, SSCP, CISSP, CISM
• Currently hold certification in good standing to satisfy IAM Level II (Information Assurance Management Level 2) per DoW 8570/8140
• Hold a current security clearance of Top Secret/Special Compartmented Information (TS/SCI) with an in-scope counter-intelligence (CI) or full-scope polygraph.
• Successfully completed Tier 5 investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years GDIT

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Opportunity Owned From working with technologies like AI, cyber and cloud to careers in intelligence and health, we offer endless opportunities to apply your expertise to create a safer, smarter world.

The likely salary range for this position is $110,500 - $149,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours: 40 Travel Required: Less than 10% Telecommuting Options: Onsite Work Location: USA NM Las Cruces Additional Work Locations:

Total Rewards at GDIT

• Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match.
• To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available.
• We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

Our Identity Verification Process: As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work: We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development. Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.