IT and Cyber Risk Auditor Principal

General Dynamics

Confirmed live today High trust

Quick summary

Work type: On-site
Location: La Plata, MD
Salary: $119,000–$161,000 / yr
Posted: 58 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $185k

This role $140k

$107k $232k

below market most similar roles pay here above market

This role pays less than 84% of similar roles. Most pay $156,000–$214,500 — the blue band above. At the midpoint, this role pays about $140k versus about $185k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1377 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 1184 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · IT and Cyber Risk Auditor Principal

Role Posting Log in to save

The IT and Cyber Risk Auditor Principal joins the Cyber and IT Risk Management team to monitor and enforce security controls for technical, operational, and management support. This role involves developing and documenting system security plans, contingency plans, and other security-related documentation while identifying, tracking, and remediating system vulnerabilities. Key responsibilities include preparing artifacts for annual audits, managing Plans of Action and Milestones, and performing Security Technical Implementation Guide and FISMA assessments. The candidate will utilize skills in cybersecurity controls, NIST 800-53, and ICD 503 policies. Technical requirements include experience with Splunk, Security Center, Telos XACTA, and McAfee EPO. The position focuses on ensuring system compliance with agency hardening guidelines, performing security impact analyses on change requests, and providing incident response for malware infections or classification spills.

Skills

NIST 800-53 ICD 503 Cybersecurity Controls Splunk XACTA Windows Unix STIG FISMA Incident Response Security Impact Analysis POA&M ATO Security Technical Implementation Guide Security Center

What you'll do

Monitor and enforce security controls for technical, operational, and management support.
Develop and document system security plans, contingency plans, and other security-related documentation.
Identify, track, and remediate system vulnerabilities and manage Plans of Action and Milestones (POA&Ms).
Prepare system artifacts for annual audits and complete Authority to Operate (ATO) security packages.
Review system configurations against agency hardening guidelines and perform security impact analyses on change requests.
Analyze monthly vulnerability scan reports and perform security system event investigations.
Provide incident response for classification spills, malware infections, and misconfiguration exposures.
Perform STIG and FISMA assessments and complete annual reporting.

What we're looking for

Must be a U.S. Citizen.
Must currently possess or be able to obtain a Top Secret SCI clearance with a polygraph.
Must maintain certification in accordance with DoW Directive 8140.01 Cyberspace Workforce Management requirements.
Must have a BA/BS degree or equivalent.
Must have 8+ years of related experience.
Must have 3-5 years of specific experience with ICD 503 and NIST 800-53 policies.
Must have senior-level experience engineering IT systems and knowledge of current technologies.
Top Secret clearance w/t polygraph.

Similar roles

Information Security Analyst Principal

General Dynamics

Pearl Harbor, HI 40 days ago $107,744–$140,300

RMF STIGs ACAS DISA SCAP Linux Windows Firewall NIST 800-53 FIPS 199 FIPS 200 Information Assurance Vulnerability Assessment Security Impact Analysis User Authentication Digital Signatures POA&M

5+ yrs exp

Save

Principal Associate, Cyber Risk & Analysis

Capital One Financial

McLean, VA 48 days ago

AI ML Prompt Engineering Multi-agent Orchestration Threat Intelligence Cloud Security Application Security Databricks Spark AWS GCP Azure IaC APIs Containers CI/CD MITRE ATT&CK NIST CSF PCI DSS SOX ITGC SIEM SOAR Graph Tooling

3+ yrs exp

Save

Cyber Security Principal

FedEx

Plano, TX +2 8 days ago

IAM SailPoint IdentityIQ Cybersecurity IT Security Infrastructure Automation Risk Frameworks Audit Controls Cyber-intelligence

5+ yrs exp Hybrid

Save

Principal Associate, Cyber Security

Capital One Financial

McLean, VA 33 days ago

AI ML Prompt Engineering Multi-agent Orchestration Threat Intelligence Cloud Security Application Security NIST CSF MITRE ATT&CK CMMC FedRAMP Splunk Crowdstrike Qualys AWS Security Hub API Multi-cloud Risk Management

3+ yrs exp

Save

Principal Associate, Tech Risk & Analysis, Technology Audit

Capital One Financial

McLean, VA +4 1 day ago $119,400–$136,200

AWS GCP Azure Cybersecurity Cloud Computing Infrastructure as Code Data Analytics Identity and Access Management Application Security Site Reliability Engineering Chaos Engineering Distributed Systems Observability Incident Response Disaster Recovery High Availability Test Scripting

3+ yrs exp Hybrid

Save

Principal, Cyber Intelligence

L3Harris

Huntsville, AL 6 days ago

Risk Management Framework (RMF) JSIG NIST 800-53 DISA STIGs ACAS NESSUS SCAP HBSS Active Directory Group Policy VMWare Nutanix Citrix Linux UNIX Windows Server Artificial Intelligence Information Assurance Cyber Intelligence

10+ yrs exp

Save