Senior IT & Cyber Risk Auditor Leader

General Dynamics Information Technology, Inc.; Las Cruces (NM); On-site; USD 111,000 - 150,000; Full time

Job summary

General Dynamics Information Technology, Inc. seeks an IT & Cyber Risk Auditor Principal to lead enterprise IT and cybersecurity risk assessments supporting national security missions. You will assess controls, identify gaps, and partner with cross-functional teams to strengthen risk posture.

You will evaluate IT general controls, cybersecurity controls, and risk management processes, while supporting audit reports and executive briefings across federal programs. TS/SCI with poly may be required.

Qualifications

• Bachelor’s degree or equivalent in a related field.
• 5+ years of progressive IT audits or cybersecurity risk experience.
• Current DoD directives and IAM Level II certifications or equivalent.

Responsibilities

• Lead IT and cybersecurity risk audits and assessments.
• Evaluate IT general controls, cybersecurity controls, and risk processes.
• Assess compliance with NIST RMF, FISMA, FedRAMP, ISO 27001.
• Document control gaps and remediation opportunities.
• Provide risk-based recommendations to leadership.
• Support audit reports and executive briefings.
• Coordinate with cross-functional teams to improve risk posture.
• Perform STIG and FISMA assessments and ATO activities.

Skills

Cyber Risks

Cybersecurity Controls

Cybersecurity Risk Management

Security Controls

Security Risk

Education

Bachelor’s degree or equivalent (Information Systems, Cybersecurity, Computer Science, Accounting, or related field)

DoD 8570/8140 IAM Level II or equivalent certification exposure

Tools

XACTA

ICD 503

NIST 800-83 rev4

Splunk

Security Center

Telos XACTA

McAfee EPO

Job description

General Dynamics Information Technology, Inc. seeks an IT & Cyber Risk Auditor Principal to lead enterprise IT and cybersecurity risk assessments supporting national security missions. You will assess controls, identify gaps, and partner with cross-functional teams to strengthen risk posture.

You will evaluate IT general controls, cybersecurity controls, and risk management processes, while supporting audit reports and executive briefings across federal programs. TS/SCI with poly may be required.