IT/Cyber Internal Auditor

Relocation assistance is not available. A U.S. Government SECRET clearance is required within a reasonable time after hire. Travel is expected up to 25% of the time.

About the role

Northrop Grumman’s Internal Audit department is seeking a qualified individual to join our diverse audit staff. The IT / Cyber Auditor will report to the Manager of Internal Audit and work on revolutionary systems that impact people's lives around the world. Our culture thrives on intellectual curiosity, cognitive diversity, and bringing your whole self to work.

Responsibilities

• Conduct technology and operations audits, either as an individual contributor or lead, for domestic and international locations, major programs, and subsidiaries. Scope includes Information Security and IT General Controls such as Access Control, Change Management, Server and Network Management, etc.
• Examine and verify IT systems and applications against policies/procedures to determine reliability, effectiveness of controls, and compliance with company policies, contracts, and laws.
• Assist with developing and executing audits using a risk-based approach, including control assessments.
• Establish and maintain cooperative working relationships with auditees and management.
• Incorporate data analytics to identify issues, automate work, improve efficiency, and highlight risk areas.
• Prepare and present audit-cycle materials to Sector staff, management, and Internal Audit leadership.
• Assist in evaluating the impact of new business or regulatory changes on the company and internal audit approach.
• Work on other types of audits across the company covering various functional topics and processes.

Requirements

• Bachelor’s degree in Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations, or a related field with 3 years of relevant experience.
• Familiarity with NIST 800-171, NIST 800-53, ITIL frameworks, and third-party assurance reports (SOC 1, 2, 3).
• Experience in IT or Operations Internal Auditing, Risk Management, IT Compliance, IT Project Management, and/or Information Security.
• Working knowledge of data-gathering analytical tools (e.g., SAP, MS Office (Excel, Access), ACL) to analyze and interpret information, identify trends, and present data.
• Familiarity with Cloud technology and AI concepts.
• Ability to perform multiple projects concurrently.
• Ability to obtain a U.S. Government SECRET clearance.

Preferred Qualifications

• Master’s degree in Information Systems/Technology, Engineering, Cybersecurity, Business, Finance, Accounting, Operations, or a related field with 1 year of experience.
• Certifications such as Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), Certified Management Accountant (CMA), or Project Management Professional (PMP).
• Experience auditing general computing controls and IT control testing of networks, applications, operating systems, and databases against standards like NIST 800-53 and NIST 800-171.
• Work experience in the Aerospace and Defense Industry or Government Contracting.
• Active SECRET, TOP SECRET (TS), TS/SCI, or TS/SAP clearance.

Skills

• Strong interpersonal and effective communication skills, both written and verbal.
• Ability to independently navigate and work on unfamiliar topics.
• Ability to interact with and present to executive-level management.

Pay

Primary salary range: $91,800.00 – $137,600.00. The final offer considers scope, responsibilities, experience, education, skills, and market conditions. Eligible employees may receive overtime, shift differentials, discretionary bonuses, annual bonuses, Long Term Incentives (for Vice President or Director roles), health insurance, life and disability insurance, a savings plan, paid holidays, and paid time off (PTO).