Staff Auditor

GE Vernova • Atlanta, GA

3d

About The Position

The Staff Digital Auditor performs security assessments and information security audits of Third Parties utilizing established IT risk assessment framework and assessment programs. Conducts IT risk assessments to identify appropriate oversight tier and relevant IT controls. Develops and executes assessment approach based on risk assessments. Prepares assessment reports detailing assessor's review of the information security controls and any control gaps. Engages business to re-mediate issues.

Requirements

• Bachelor's Degree in Computer Science or “STEM” Majors (Science, Technology, Engineering and Math) with advanced experience.
• Bachelor's Degree in Computer Science or “STEM” Majors (Science, Technology, Engineering and Math) with minimum years of experience6years
• Strong oral communication, business writing, presentation and facilitation skills

Nice To Haves

• Internationally recognized information security/IT Audit certification/qualifications such as CISSP, CISA, GSNA, GSAE, or CCNA
• Experience performing IT Audits or Security Assessments of 3rd Party Suppliers in a regulated environment (i.e. Financial Services, Critical Infrastructure)
• Detailed understanding of industry accepted Information Security and IT governance standards (i.e. COBIT, ISO, NIST)
• Awareness or experience with industry regulations (i.e. HIPAA, DFARS, Export control, PCI)
• Proven ability to execute across multiple locations and stakeholder groups
• Ability to work cross functionally
• Ability to influence others effectively across a matrixed organization
• Excellent analytical / technical skills
• Strong oral communication, business writing, presentation and facilitation skills
• Experience managing projects across a complex organization and IT landscape

Responsibilities

• Perform 3rd Party information security assessments utilizing established IT risk assessment framework and assessment programs.
• Provide practical recommendations to remediate control gaps
• Prepare present assessment findings to a cross-functional audience.
• Engage business units and Third Parties to remediate control gaps.
• Communicate common information security themes and control gaps identified across the entire Third Party inventory and lifecycle.
• Coordinate across functions such as security, sourcing, legal, and compliance.
• Establish operating rhythm with Business Units to report out on key metrics including status of assessments and issue management.
• Stay current and utilize industry standards and best practices to drive improvements in overall Third Party security posture.

Benefits

• medical, dental, vision, and prescription drug coverage
• access to Health Coach from GE Vernova, a 24/7 nurse-based resource
• access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling and referral services
• GE Vernova Retirement Savings Plan, a tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions, as well as access to Fidelity resources and financial planning consultants
• tuition assistance
• adoption assistance
• paid parental leave
• disability benefits
• life insurance
• 12 paid holidays
• permissive time off

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level