It/Cyber Internal Auditor

Description

Northrop Grumman’s Internal Audit department is seeking a qualified individual to join our diverse audit staff. The IT / Cyber Auditor will report to the Manager of Internal Audit.

Job duties include, but are not limited to:

• Conducting technology and operations audits, either in the individual contributor and/or lead capacity, for both domestic and international as well as major program locations and at our subsidiaries.
• Scope of audits will include test steps related to overall Information Security as well as IT General Controls such as Access Control, Change Management, Server and Network Management, etc. Other areas may be audited based on risk assessments performed during audit planning.
• Examining and verifying IT systems and applications against associated policies/procedures to determine the reliability and effectiveness of controls, as well as to ensure compliance with applicable company policies/procedures, related contracts/agreements, and applicable laws.
• Assisting with the development and execution of audits using a risk-based audit approach, including assessment of controls.
• Establishing and maintaining cooperative working relationships with auditees and affected management.
• Incorporate data analytics to identify issues, automate work, improve efficiency and effectiveness and identify risk areas.
• Preparing presentations covering the various phases of the audit cycle and presenting those materials to Sector staff, Sector management and IA management.
• Assisting in the evaluation of the potential effects on the company and our internal audit approach of all newly established and/or potential business and regulatory requirement changes implemented by the Company and/or any other regulatory entities.
• Ability to work on other types of audits across the company covering various functional topics and processes.

This role will demand the following characteristics for success:

• Strong interpersonal and effective communication skills, both written and verbal.
• Ability to independently navigate and work on unfamiliar topics on a given assignment
• Ability to interact with and present to executive level management.

Basic Qualifications:

• Bachelor's degree in Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations or related field with 3 years of relevant experience
• Familiarity with NIST 800-171, NIST 800-53, and/or ITIL frameworks as well as third party assurance reports (SOC 1, 2, 3).
• Experience in IT or Operations Internal Auditing, Risk Management, IT Compliance, IT Project Management, and/or Information Security.
• Working knowledge of data gathering analytical tools (i.e. SAP, MS Office (Excel, Access), ACL) to analyze and interpret a wide variety of information to identify trends as well as positive and negative correlations, form valid conclusions, and present data to best highlight relevant points.
• Familiarity with Cloud technology and AI concepts.
• Experience in performing multiple projects concurrently.
• Ability to obtain a U.S. Government SECRET Clearance within a reasonable amount of time following hire.
• Ability to travel up to 25% of the time.

Preferred Qualifications:

• Master's degree Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations or related field with 1 year of experience.
• Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), Certified Management Accountant (CMA), Project Management Professional (PMP), or other similar certification.
• Experience auditing general computing controls and IT control testing of networks, applications, operating systems, and databases against standards like NIST 800-53 and NIST 800-171.
• Work experience in the Aerospace and Defense Industry / Government Contracting.
• SECRET or TOP SECRET Clearance (TS), TS SCI or TS SAP Access.