Job Description
BAE Systems, Inc. is seeking an IT Compliance Auditor Sr Principal, focused on CMMC and internal audit efforts, to join our Audit Engagement team within the Governance and Compliance team, under the Enterprise Shared Services (ESS) IT Delivery Organization. The Audit Engagement Team delivers a centralized hub for comprehensive guidance to ensure consistent and efficient audit engagement and audit compliance operations across the enterprise. This role will merge the existing internal audit responsibilities, with specialized CMMC audit requirements, resulting in a new comprehensive integrated audit role. It involves overseeing and leading both internal audits and CMMC audit readiness efforts to ensure compliance, improve processes, and mitigate risks in line with organizational and regulatory standards.
The primary purpose of this role is to develop a comprehensive, company-wide Cybersecurity Maturity Model Certification (CMMC) compliance program, ultimately leading CMMC audit preparation and execution across sector and enterprise levels. This role involves defining the approach, creating schedules, leading internal assessments, conducting control gap analysis, and tracking progress by reporting on status and trends. This role will also function as a liaison for internal audit efforts for Enterprise Shared Services. The selected candidate will work closely with program managers and systems owners to execute an internal audit and CMMC preparation strategy, improving control activities, building efficiencies, enhancing effectiveness, and ensuring consistency. A key component is building strong relationships across teams to ensure alignment to implement required changes, coordinating with external auditors for the certification process, reporting status to leadership, and ensuring ongoing compliance with controls, policies, and standards through continuous monitoring. The role is a key individual whose responsibilities directly contribute to maintaining a strong, compliant cybersecurity posture within BAE Systems Inc.
Required Education, Experience, & Skills
- 8 years of experience in information technology, compliance, assurance, auditing, or relevant information security or information technology roles.
- Sound understanding of technical audits, NIST 800-53 controls, as well as cybersecurity frameworks, methodologies, and compliance, to include CMMC.
- Experience with continuous process improvement, innovative governance, risk and compliance solutions.
- Proficient with a broad knowledge of IT operations and technologies such as Applications, Network Infrastructure technologies (WAN/MAN/LAN), Cybersecurity, Active Directory, Backup & Recovery, Data Center, Operating Systems, Virtualization Services, SDLC and Change Management.
- Data Analysis experience.
Preferred Education, Experience, & Skills
- Bachelor's, master's degree
- IAM Level III certification: (CISSP, CISM, GSLC)
Pay Information
Full-Time Salary Range: $106654 - $181311
Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.
Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.
About BAE Systems, Inc.
BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company which delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Improving the future and protecting lives is an ambitious mission, but it's what we do at BAE Systems. Working here means using your passion and ingenuity where it counts - defending national security with breakthrough technology, superior products, and intelligence solutions. As you develop the latest technology and defend national security, you will continually hone your skills on a team-making a big impact on a global scale. At BAE Systems, you'll find a rewarding career that truly makes a difference.
