Lead IT & Cyber Risk Auditor for Federal Security

General Dynamics IT; Las Cruces (NM); On-site; USD 150,000 - 190,000; Full time

Job summary

GENERAL DYNAMICS IT seeks an IT & Cyber Risk Auditor Principal to lead enterprise-level risk assessments and audits, ensuring systems and data security for national security missions.

You will evaluate IT controls, coordinate RMF/FISMA activities, and provide actionable insights to leadership while driving remediation with cross-functional teams.

The role requires TS/SCI with polygraph, extensive auditing experience, and strong communication skills within a federal contracting environment.

Qualifications

• 5+ years of progressive IT audits, cybersecurity risk management, or information assurance experience.
• Experience using XACTA database applications and the ICD 503, NIST 800-83 rev4 policy.
• Experience with Splunk, Security Center, Telos XACTA, and McAfee ePO.
• Expertise with cybersecurity and IT control frameworks and compliance requirements.
• Experience conducting complex IT/cybersecurity audits in government or federal contracting environments.
• Experience with cloud security risk assessments and modern technologies.
• Clear and effective communication with technical and executive audiences.
• Ability to multi-task and adapt in a fast-paced environment.
• Ability to learn an application environment to update/create documentation.

Responsibilities

• Lead and execute rigorous IT and cybersecurity risk audits and assessments.
• Evaluate IT general controls, cybersecurity controls, and risk management processes.
• Assess compliance with federal frameworks and guidance (NIST, RMF, FISMA, FedRAMP, ISO 27001).
• Identify and document control gaps, risk exposures, and areas for improvement.
• Provide risk-based recommendations and executive-style briefings.
• Support audit report preparation and remediation tracking.
• Manage Authority to Operate (ATO) packages and security documentation.
• Collaborate with IT, cybersecurity, compliance, and program teams on remediation.

Skills

Cybersecurity risk

IT audits

NIST RMF

Security controls

Cloud security

Education

Bachelor's degree in Information Systems or related field

Tools

Splunk

Security Center

Telos XACTA

McAfee ePO

Job description

GENERAL DYNAMICS IT seeks an IT & Cyber Risk Auditor Principal to lead enterprise-level risk assessments and audits, ensuring systems and data security for national security missions.

You will evaluate IT controls, coordinate RMF/FISMA activities, and provide actionable insights to leadership while driving remediation with cross-functional teams.

The role requires TS/SCI with polygraph, extensive auditing experience, and strong communication skills within a federal contracting environment.