IT/Cyber Internal Auditor

Northrop Grumman•Falls Church, VA

1d•$91,800 - $137,600•Onsite

About The Position

Northrop Grumman's Internal Audit department is seeking a qualified individual to join our diverse audit staff. The IT / Cyber Auditor will report to the Manager of Internal Audit. This role will conduct technology and operations audits, either as an individual contributor and/or lead, for domestic and international locations, major program sites, and subsidiaries. The scope of audits will include testing related to overall Information Security and IT General Controls such as Access Control, Change Management, Server and Network Management, etc. Other areas may be audited based on risk assessments during audit planning. The auditor will examine and verify IT systems and applications against policies/procedures to determine control reliability and effectiveness, ensuring compliance with company policies, contracts, agreements, and applicable laws. Responsibilities include assisting with the development and execution of risk-based audits, establishing cooperative working relationships with auditees, incorporating data analytics for issue identification and efficiency improvements, preparing and presenting audit findings to management, and evaluating the impact of new business or regulatory requirements. The role also involves the ability to work on other types of audits across the company covering various functional topics and processes.

Requirements

Bachelor's degree in Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations or related field with 3 years of relevant experience
Familiarity with NIST 800-171, NIST 800-53, and/or ITIL frameworks as well as third party assurance reports (SOC 1, 2, 3).
Experience in IT or Operations Internal Auditing, Risk Management, IT Compliance, IT Project Management, and/or Information Security.
Working knowledge of data gathering analytical tools (i.e. SAP, MS Office (Excel, Access), ACL) to analyze and interpret a wide variety of information to identify trends as well as positive and negative correlations, form valid conclusions, and present data to best highlight relevant points.
Familiarity with Cloud technology and AI concepts.
Experience in performing multiple projects concurrently.
Ability to obtain a U.S. Government SECRET Clearance within a reasonable amount of time following hire.
Ability to travel up to 25% of the time.

Nice To Haves

Master's degree Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations or related field with 1 year of experience.
Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), Certified Management Accountant (CMA), Project Management Professional (PMP), or other similar certification.
Experience auditing general computing controls and IT control testing of networks, applications, operating systems, and databases against standards like NIST 800-53 and NIST 800-171.
Work experience in the Aerospace and Defense Industry / Government Contracting.
SECRET or TOP SECRET Clearance (TS), TS SCI or TS SAP Access.

Responsibilities

Conducting technology and operations audits, either in the individual contributor and/or lead capacity, for both domestic and international as well as major program locations and at our subsidiaries.
Scope of audits will include test steps related to overall Information Security as well as IT General Controls such as Access Control, Change Management, Server and Network Management, etc. Other areas may be audited based on risk assessments performed during audit planning.
Examining and verifying IT systems and applications against associated policies/procedures to determine the reliability and effectiveness of controls, as well as to ensure compliance with applicable company policies/procedures, related contracts/agreements, and applicable laws.
Assisting with the development and execution of audits using a risk-based audit approach, including assessment of controls.
Establishing and maintaining cooperative working relationships with auditees and affected management.
Incorporate data analytics to identify issues, automate work, improve efficiency and effectiveness and identify risk areas.
Preparing presentations covering the various phases of the audit cycle and presenting those materials to Sector staff, Sector management and IA management.
Assisting in the evaluation of the potential effects on the company and our internal audit approach of all newly established and/or potential business and regulatory requirement changes implemented by the Company and/or any other regulatory entities.
Ability to work on other types of audits across the company covering various functional topics and processes.