IT/Cyber Internal Auditor

Northrop Grumman; Redondo Beach (CA); On-site; USD 92,000 - 138,000; Full time

Job summary

Northrop Grumman's Internal Audit department seeks an IT / Cyber Auditor to join our diverse audit staff. You will conduct technology and operations audits, evaluate IT controls, and leverage data analytics to identify risk areas and improve efficiency.

Required: a bachelor's degree in Information Systems/Technology, Engineering or related field with 3 years of experience, familiarity with NIST 800-171/800-53 and ITIL, plus ability to travel up to 25% and to obtain a U.S.

Qualifications

• Bachelor's degree in Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations or related field.
• 3 years of relevant experience in IT auditing or risk management.
• Familiarity with NIST 800-171/800-53 and ITIL frameworks; SOC 1, 2, 3 knowledge is a plus.
• Experience with data gathering/analysis tools such as SAP, Excel and ACL.

Responsibilities

• Conduct technology and operations audits for domestic and international locations.
• Assess IT General Controls and information security controls.
• Incorporate data analytics to identify risks, automate work, and improve efficiency.
• Prepare presentations covering audit findings and present to IA management.
• Collaborate with auditees and affected management throughout audits.

Skills

NIST/ITIL familiarity

Data analytics tools

Education

Bachelor's degree in IT/Engineering/Cybersecurity

Tools

SAP

MS Excel

ACL

Job description

RELOCATION ASSISTANCE: No relocation assistance available

CLEARANCE REQUIRED FOR START: No

CLEARANCE TYPE: Secret

TRAVEL: Yes, 25% of the Time

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Northrop Grumman’s Internal Audit department is seeking a qualified individual to join our diverse audit staff. The IT / Cyber Auditor will report to the Manager of Internal Audit.

Job Duties Include, But Are Not Limited To

• Conducting technology and operations audits, either in the individual contributor and/or lead capacity, for both domestic and international as well as major program locations and at our subsidiaries.


• Scope of audits will include test steps related to overall Information Security as well as IT General Controls such as Access Control, Change Management, Server and Network Management, etc. Other areas may be audited based on risk assessments performed during audit planning.


• Examining and verifying IT systems and applications against associated policies/procedures to determine the reliability and effectiveness of controls, as well as to ensure compliance with applicable company policies/procedures, related contracts/agreements, and applicable laws.


• Assisting with the development and execution of audits using a risk-based audit approach, including assessment of controls.


• Establishing and maintaining cooperative working relationships with auditees and affected management.


• Incorporate data analytics to identify issues, automate work, improve efficiency and effectiveness and identify risk areas.


• Preparing presentations covering the various phases of the audit cycle and presenting those materials to Sector staff, Sector management and IA management.


• Assisting in the evaluation of the potential effects on the company and our internal audit approach of all newly established and/or potential business and regulatory requirement changes implemented by the Company and/or any other regulatory entities.


• Ability to work on other types of audits across the company covering various functional topics and processes.

This Role Will Demand The Following Characteristics For Success

• Strong interpersonal and effective communication skills, both written and verbal.


• Ability to independently navigate and work on unfamiliar topics on a given assignment


• Ability to interact with and present to executive level management.

Basic Qualifications

• Bachelor's degree in Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations or related field with 3 years of relevant experience


• Familiarity with NIST 800-171, NIST 800-53, and/or ITIL frameworks as well as third party assurance reports (SOC 1, 2, 3).


• Experience in IT or Operations Internal Auditing, Risk Management, IT Compliance, IT Project Management, and/or Information Security.


• Working knowledge of data gathering analytical tools (i.e. SAP, MS Office (Excel, Access), ACL) to analyze and interpret a wide variety of information to identify trends as well as positive and negative correlations, form valid conclusions, and present data to best highlight relevant points.


• Familiarity with Cloud technology and AI concepts.


• Experience in performing multiple projects concurrently.


• Ability to obtain a U.S. Government SECRET Clearance within a reasonable amount of time following hire.


• Ability to travel up to 25% of the time.

Preferred Qualifications

• Master's degree Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations or related field with 1 year of experience.


• Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), Certified Management Accountant (CMA), Project Management Professional (PMP), or other similar certification.


• Experience auditing general computing controls and IT control testing of networks, applications, operating systems, and databases against standards like NIST 800-53 and NIST 800-171.


• Work experience in the Aerospace and Defense Industry / Government Contracting.


• SECRET or TOP SECRET Clearance (TS), TS SCI or TS SAP Access.

Primary Level Salary Range: $91,800.00 - $137,600.00

The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.

Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.

The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.

Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.