IT/Cyber Internal Auditor

Relocation assistance is not available. U.S. Government SECRET clearance required within a reasonable time after hire. Travel required: 25% of the time.

About the role

Northrop Grumman’s Internal Audit department is seeking a qualified individual to join our diverse audit staff as an IT / Cyber Auditor, reporting to the Manager of Internal Audit. Our employees have incredible opportunities to work on revolutionary systems that impact lives around the world, from historic technological advancements to pioneering future innovations. We foster a culture of intellectual curiosity, cognitive diversity, and bold ideas, where employees are empowered to make history.

Responsibilities

• Conduct technology and operations audits, either as an individual contributor or lead, for domestic and international locations, major programs, and subsidiaries. Audit scope includes Information Security and IT General Controls such as Access Control, Change Management, Server and Network Management, and others based on risk assessments.
• Examine and verify IT systems and applications against policies, procedures, contracts, and laws to assess control reliability, effectiveness, and compliance.
• Assist in developing and executing audits using a risk-based approach, including control assessments.
• Establish and maintain cooperative working relationships with auditees and management.
• Incorporate data analytics to identify issues, automate work, improve efficiency, and highlight risk areas.
• Prepare and present audit-phase materials to Sector staff, management, and Internal Audit leadership.
• Evaluate the impact of new business or regulatory changes on the company and internal audit approach.
• Work on various functional audits across the company as needed.

Qualifications

• Bachelor’s degree in Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations, or a related field with 3 years of relevant experience.
• Familiarity with NIST 800-171, NIST 800-53, ITIL frameworks, and third-party assurance reports (SOC 1, 2, 3).
• Experience in IT or Operations Internal Auditing, Risk Management, IT Compliance, IT Project Management, and/or Information Security.
• Working knowledge of data-gathering and analytical tools (e.g., SAP, MS Office, ACL) to analyze information, identify trends, and present findings.
• Familiarity with Cloud technology and AI concepts.
• Ability to manage multiple projects concurrently.
• Strong interpersonal, written, and verbal communication skills, with the ability to present to executive-level management.
• Ability to obtain a U.S. Government SECRET clearance within a reasonable time after hire.

Preferred Qualifications

• Master’s degree in Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations, or a related field with 1 year of experience.
• Professional certifications such as Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), Certified Management Accountant (CMA), or Project Management Professional (PMP).
• Experience auditing general computing controls and IT control testing of networks, applications, operating systems, and databases against standards like NIST 800-53 and NIST 800-171.
• Work experience in the Aerospace and Defense Industry or Government Contracting.
• Active SECRET, TOP SECRET (TS), TS/SCI, or TS/SAP clearance.

Pay

Primary salary range: $91,800.00 – $137,600.00. Base salary offers consider factors such as scope, responsibilities, candidate experience, education, skills, and market conditions. Eligible employees may receive overtime, shift differentials, discretionary bonuses, annual performance-based bonuses, and long-term incentives (for Vice President or Director roles).

Benefits

• Health insurance coverage.
• Life and disability insurance.
• Savings plan.
• Company-paid holidays.
• Paid time off (PTO) for vacation and personal business.