Hybrid Information Assurance, Audit Support Services

at General Dynamics Information Technology

• Job title: Information Assurance, Audit Support Services
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: $96,569 - $130,651 per year
• Degree requirement: Professional Certificate
• Tech skills: Cyber Security, TypeScript
• Location requirements: Hybrid, Springfield, United States

About the role

• Information Assurance/Audit Support Services specialist supporting Intelligence areas for GDIT. Managing audit preparation and execution for external cyber audits in Virginia and Missouri.

Responsibilities

• Provide audit support that manages customers’ preparation for, execution of, and response to external cyber audits
• Aggregating documents and artifacts
• Securing facilities and infrastructure necessary to house auditors
• Developing presentations, briefs, and other products for stakeholders
• Coordinating audit activities across the NGA enterprise
• Conducting routine internal audit assessments for audit readiness
• Identifying audit criteria for CCRI/CCORI, FISMA, FISCAM, and CSSP audits
• Reviewing regulations and guidance to identify applicable cybersecurity standards
• Performing self-assessments of CSOC services to identify deficiencies and provide remediation recommendations
• Providing status briefings to the Government on the status of findings and remediation status
• Maintaining dashboards, charts, documents, and reports for NGA’s audit readiness

Requirements

• Minimum of 6 years demonstrated experience supporting an IC or DoD agency in an auditor role
• TS SCI POLY (active)
• Considerable experience preparing organizations for CCRI/CCORI, CSSP, and FISMA audits
• Strong understanding of the NIST Cybersecurity Framework
• Working knowledge of DOD Cybersecurity Services Evaluator Scoring Metrics (ESM) V.10
• Working knowledge of DoDIN Inspection Coordination Guides
• Working knowledge of DoDIN Inspection Pre-Deployment Checklists
• Working knowledge of the areas of CCORI
• Strong understanding of cybersecurity compliance policy, governance, programs, processes, and metrics
• Excellent verbal and writing skills with the ability to write clear and concise assessment reports
• Demonstrated experience providing briefings to an executive audience
• IAT Level II certified
• Willingness to obtain CSSP Auditor certification within 6 months of joining the team

Benefits

• Health insurance
• 401(k) plan with company match
• Paid time off including vacation, sick, and personal time
• Paid parental leave
• Military, bereavement, and jury duty leave
• Short and long-term disability benefits
• Life insurance and accidental death and dismemberment insurance
• Personal accident insurance
• Critical illness insurance
• Business travel accident insurance
• Flexible work weeks where possible