IT/Cyber Internal Auditor

Relha LLC; Linthicum (MD); On-site; USD 92,000 - 138,000; Full time

Benefits offered by this job

Health insurance

Life and disability insurance

Savings plan

Paid holidays

Paid time off

Job summary

Northrop Grumman is seeking an IT / Cyber Auditor to join Internal Audit. You will conduct technology and operations audits, focus on ITGC and security controls, and assess compliance with policies, contracts, and laws.

The role requires collaboration with auditees, executive-level presentations, and the ability to manage multiple audits while leveraging data analytics. Travel up to 25% and eligibility for SECRET clearance are expected.

Qualifications

• Bachelor's degree in Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations or related field with 3 years of relevant experience
• Familiarity with NIST 800-171, NIST 800-53, and/or ITIL frameworks and third-party assurance reports (SOC 1, 2, 3)
• Experience in IT or Operations Internal Auditing, Risk Management, IT Compliance, IT Project Management, and/or Information Security
• Working knowledge of data gathering analytical tools (SAP, MS Office, ACL) to analyze and interpret data
• Familiarity with Cloud technology and AI concepts
• Ability to obtain a U.S. Government SECRET Clearance within a reasonable time and travel up to 25%

Responsibilities

• Conducting technology and operations audits, either in individual contributor and/or lead capacity, for domestic and international locations
• Scope audits to test Information Security and IT General Controls such as Access Control, Change Management, Server and Network Management
• Examine IT systems and applications against policies to determine reliability and compliance
• Assist with development and execution of audits using a risk-based approach
• Build cooperative relationships with auditees and management
• Incorporate data analytics to identify issues and improve efficiency
• Prepare presentations for Sector staff and IA management
• Evaluate effects of new business and regulatory changes on audit approach
• Work on various audits across the company covering multiple topics

Skills

Interpersonal communication

Executive interaction

Data analytics

Education

Bachelor's degree in Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations

Master's degree Information Systems/Technology or related field

Tools

SAP

MS Office (Excel, Access)

ACL

Job description

RELOCATION ASSISTANCE: No relocation assistance available

CLEARANCE REQUIRED FOR START: No

CLEARANCE TYPE: Secret

TRAVEL: Yes, 25% of the Time

Description

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Northrop Grumman’s Internal Audit department is seeking a qualified individual to join our diverse audit staff. The IT / Cyber Auditor will report to the Manager of Internal Audit.

Job duties include, but are not limited to:

Conducting technology and operations audits, either in the individual contributor and/or lead capacity, for both domestic and international as well as major program locations and at our subsidiaries.

Scope of audits will include test steps related to overall Information Security as well as IT General Controls such as Access Control, Change Management, Server and Network Management, etc. Other areas may be audited based on risk assessments performed during audit planning.

Examining and verifying IT systems and applications against associated policies/procedures to determine the reliability and effectiveness of controls, as well as to ensure compliance with applicable company policies/procedures, related contracts/agreements, and applicable laws.

Assisting with the development and execution of audits using a risk-based audit approach, including assessment of controls.

Establishing and maintaining cooperative working relationships with auditees and affected management.

Incorporate data analytics to identify issues, automate work, improve efficiency and effectiveness and identify risk areas.

Preparing presentations covering the various phases of the audit cycle and presenting those materials to Sector staff, Sector management and IA management.

Assisting in the evaluation of the potential effects on the company and our internal audit approach of all newly established and/or potential business and regulatory requirement changes implemented by the Company and/or any other regulatory entities.

Ability to work on other types of audits across the company covering various functional topics and processes.

This role will demand the following characteristics for success:

Strong interpersonal and effective communication skills, both written and verbal.

Ability to independently navigate and work on unfamiliar topics on a given assignment

Ability to interact with and present to executive level management.

Basic Qualifications:

Bachelor's degree in Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations or related field with 3 years of relevant experience

Familiarity with NIST 800-171, NIST 800-53, and/or ITIL frameworks as well as third party assurance reports (SOC 1, 2, 3).

Experience in IT or Operations Internal Auditing, Risk Management, IT Compliance, IT Project Management, and/or Information Security.

Working knowledge of data gathering analytical tools (i.e. SAP, MS Office (Excel, Access), ACL) to analyze and interpret a wide variety of information to identify trends as well as positive and negative correlations, form valid conclusions, and present data to best highlight relevant points.

Familiarity with Cloud technology and AI concepts.

Experience in performing multiple projects concurrently.

Ability to obtain a U.S. Government SECRET Clearance within a reasonable amount of time following hire.

Ability to travel up to 25% of the time.

Preferred Qualifications:

Master's degree Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations or related field with 1 year of experience.

Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), Certified Management Accountant (CMA), Project Management Professional (PMP), or other similar certification.

Experience auditing general computing controls and IT control testing of networks, applications, operating systems, and databases against standards like NIST 800-53 and NIST 800-171.

Work experience in the Aerospace and Defense Industry / Government Contracting.

SECRET or TOP SECRET Clearance (TS), TS SCI or TS SAP Access.

Primary Level Salary Range: $91,800.00 - $137,600.00

The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.

Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.

The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.

Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.