Job description summary
The sr digital auditor conducts cyber security audits on ge third parties to identify and remediate information security and supply chain resiliency risksYou will be a key member of a global team responsible for identifying and mitigating cyber riskYou will be responsible for executing large scale assessments to improve the resiliency of ge’s supply chain and ensure the protection of confidential data.
Job description
Responsibilities:
Perform 3rd party information security audits utilizing established it risk assessment framework and assessment methodologies.
Provide practical recommendations to remediate control gaps.
Prepare and present assessment findings to a cross-functional audience.
Engage business units and third parties to remediate control gaps.
Communicate common information security themes and control gaps identified across the entire third party inventory and lifecycle.
Coordinate across functions such as security, sourcing, legal, and compliance.
Establish operating rhythm with business units to report out on key metrics including status of assessments and issue remediation.
Stay current and utilize industry standards and best practices to drive improvements in overall third party security posture.
Perform third party supplier contract reviews to ensure proper cyber security requirements are adhered too.
Basic qualifications:
2+ years professional experience performing cyber security audits leveraging industry standards/frameworks such as iso 27001 and/or nist 800-53.
3+ years professional experience in it governance, it risk, it audit, it operations, or related fields, preferably with fortune 1000 companies or big 4 assurance organization.
Bachelor`s degree in information systems, cyber security, computer science, or other `stem` majors (science, technology, engineering and math) is preferred, but not required and 4+ years of relevant experience.
Preferred location is glen allen, virginia office
Desired characteristics:
Cism, cisa, cissp, crisc, cipp designation or other relevant certification is desirable.
Understanding of regulatory and external requirements as they relate to it, privacy, and cybersecurity for regulations such as dfars, cmmc, fisma, hipaa, and gdpr.
Experience conducting cyber security assessments on various architectures and systems including but not limited to web applications, corporate systems and infrastructure, and operational technology environments such as manufacturing sites and shop floors.
Experience with industry standards/framework, such as nist 800-53, nist 800-171, nist privacy framework, cmmc, iso 27001, owasp top 10 is desirable.
Knowledge of it operational functions including identity and access management, asset management, cybersecurity, data privacy.
Proven ability to handle scale, change, pace, and overall complexity.
Capability to work with a team in a fast-paced environment to meet strict deadlines while managing multiple priorities.
Initiates, supports and manages change within the organization, taking steps to remove barriers or to accelerate its pace.
Ability to synthesize and communicate complex technology topics to all levels of the organization.
Excellent listening, verbal, written and presentation communication skills.
Additional information
Ge offers a great work environment, professional development, challenging careers, and competitive compensationGe is an equal opportunity employerEmployment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.
Ge will only employ those who are legally authorized to work in the united states for this openingAny offer of employment is conditioned upon the successful completion of a drug screen (as applicable).
Relocation assistance provided: no
