Senior IT & Cyber Risk Auditor — Principal

General Dynamics - IT; Las Cruces (NM); On-site; USD 120,000 - 180,000; Full time

Job summary

General Dynamics - IT is seeking an IT & Cyber Risk Auditor Principal to lead enterprise-level IT and cybersecurity risk assessments across federal programs. You will collaborate with cross-functional teams to strengthen risk posture, evaluate controls, and deliver remediation strategies that support secure mission-critical systems.

You will partner with leadership to communicate risk implications, drive improvements, and oversee audit activities including documentation, reports, and client

Qualifications

• 5+ years in IT audits or cybersecurity risk management
• Experience auditing government or federal contractors
• Experience with cloud security risk assessments
• Strong communication to executive audiences
• Ability to multi-task in fast-paced environment

Responsibilities

• Lead IT and cybersecurity risk audits and assessments
• Evaluate IT general and cybersecurity controls
• Assess compliance with NIST, RMF, FISMA, FedRAMP, ISO 27001
• Document control gaps and remediation strategies
• Prepare audit reports and executive briefings
• Coordinate with cross-functional teams for remediation
• Support system Certification and Accreditation processes

Skills

IT audits

Cyber risk management

Information assurance

Cloud security

Incident response

Education

Bachelor’s degree in Information Systems

DoD 8570/8140 certifications

Tools

XACTA

NIST RMF

Splunk

Security Center

McAfee ePO

Job description

General Dynamics - IT is seeking an IT & Cyber Risk Auditor Principal to lead enterprise-level IT and cybersecurity risk assessments across federal programs. You will collaborate with cross-functional teams to strengthen risk posture, evaluate controls, and deliver remediation strategies that support secure mission-critical systems.

You will partner with leadership to communicate risk implications, drive improvements, and oversee audit activities including documentation, reports, and client