IT Security Auditor

Rolls-Royce•Indianapolis, IN

5d•$114,400 - $185,900•Hybrid

About The Position

Rolls-Royce offers an excellent opportunity for an IT Security Auditor to join our Cyber Security, Risk and Compliance team. In this role you will be undertaking assessment activities to identify weaknesses, policy violations in our IT systems (and/or applications) and create action plans to correct any problems in order to prevent future cyber security breaches. You will be working with other Security Auditors and Information Assurance Specialists to ensure a common approach to Security Audit across Rolls-Royce. In this role, you will travel up to 10% domestically or internationally.

Requirements

Associate degree in Computer Science or Information technology with 7+ years of Cyber Audit experience, OR Bachelor’s degree in Computer Science or Information technology with 5+ years of Cyber Audit experience, OR Master’s degree in Computer science or Information technology with 3+ years Cyber Audit of experience, OR PhD in Computer Science or Information technology, OR 9+ years of Cyber Audit experience in lieu of a degree
Must be a U.S. Citizen

Nice To Haves

Degree or MSc in Information Security
CISSP/CISM
Experience in Microsoft Azure (or equivalent cloud platforms)
CMMC experience

Responsibilities

Support the Head of Cyber Security Policy & Compliance in identifying and planning cyber security audits across the IT Function, within business areas, of our IT supply chain, and 3rd party suppliers into the business
Undertaking those audits and providing timely reports
Creating corrective action plans, in conjunction with the target system owner, in order to improve the cyber security posture of that system
Analysis of the audit output to identify trends to inform the improvement of policy, process, procedure or technology
Presenting findings to a wider audience including senior management.
Undertaking other tasks to support the wider cyber security team, such as work on the cyber culture program
Assist the wider team in developing and defining Information Security policies, standards, guidelines, and procedure to an agreed framework (ISO27000)