Senior IT & Cyber Risk Auditor (TS/SCI)

General Dynamics Information Technology (GDIT); Las Cruces (NM); On-site; USD 111,000 - 150,000; Full time

Job summary

General Dynamics Information Technology (GDIT) seeks an IT & Cyber Risk Auditor Principal to lead enterprise-level risk and compliance assessments. You will evaluate controls, identify risk exposure, and guide remediation strategies while partnering with cross-functional teams to strengthen the enterprise risk posture for federal programs.

You will collaborate with cybersecurity, IT, and program teams, perform Security and risk assessments, and contribute to audit reports and executive

Qualifications

• Bachelor’s degree or equivalent military training in information systems, cybersecurity, or related field.
• Maintain DoD Directive 8140.01 Cyberspace Workforce Management requirements.
• DoD certifications include Security+, CISSP, CISM, CGRC/CAP, GSEC, GSNA, SSCP.
• Currently hold IAM Level II per DoD 8570/8140 in good standing.
• Hold TS/SCI with CI or full-scope polygraph; T5/SBSSI within last 5 years or Continuous Vetting in last 5 years.

Responsibilities

• Lead IT and cybersecurity risk audits and assessments.
• Evaluate IT general controls and cybersecurity controls.
• Assess compliance with federal frameworks (NIST, RMF, FISMA, FedRAMP, ISO 27001).
• Identify control gaps and remediation opportunities.
• Provide risk-based recommendations to senior leadership.
• Support audit reports and executive briefings.
• Coordinate system Certification and Accreditation processes.
• Collaborate with cybersecurity, IT, compliance, and program teams to drive remediation.
• Participate in internal and external audits, including customer assessments.

Skills

Cyber Risks

Cybersecurity Controls

Cybersecurity Risk Management

Security Controls

Security Risk

Education

Bachelor’s degree or equivalent

DoD 8140 Cyberspace Workforce Management requirements

Tools

XACTA

ICD 503

NIST 800-83 rev4

Splunk

Security Center

Telos XACTA

McAfee ePO

Job description

General Dynamics Information Technology (GDIT) seeks an IT & Cyber Risk Auditor Principal to lead enterprise-level risk and compliance assessments. You will evaluate controls, identify risk exposure, and guide remediation strategies while partnering with cross-functional teams to strengthen the enterprise risk posture for federal programs.

You will collaborate with cybersecurity, IT, and program teams, perform Security and risk assessments, and contribute to audit reports and executive