Join our team of innovators and get a chance to work alongside a team of talented, curious people that are passionate about designing and deploying solutions that are accelerating humanity’s expansion into space.
Summary:
Redwire Space, Inc. has a current opportunity for a skilled and experienced IT Compliance Auditor (Analyst) to join our dynamic team at Redwire. In this capacity, you will play a crucial role in helping our organization achieve overarching governance objectives by executing our framework of IT controls that support compliance with Sarbanes-Oxley (SOX) as well as other governmental regulations that we must remain in compliance with. You will also help to ensure that our IT systems, processes, and controls are effective, efficient, and compliant with applicable standards. The ideal candidate should possess a strong background in IT risk management and/or auditing, excellent project management and communication skills, and a proven ability to meet objectives and deliver results in a fast-paced environment. The Lead IT Compliance Analyst interacts with the CIO Group, SOX Project Management Office, Internal Audit, and other stakeholders within Redwire as required.
While the position is primarily remote, the ideal candidates would live within a reasonable commutable distance to one of our Redwire Space locations, though not required. You’ll be expected to work onsite as needed for key activities.
Responsibilities:
- Lead and manage the execution of IT controls – including but not limited to management review controls, IT application controls, and key report validations – in accordance with our established control framework, management directives, and industry best practices
- Create and maintain clear, comprehensive, high-quality documentation that meets audit requirements and proves our IT controls are suitably designed and operating effectively
- Assist in management of audit projects by serving as a primary point of contact for the internal and external audit teams, coordinating walkthroughs and touchpoints, fulfilling audit evidence requests, and responding to auditor inquiries
- Perform root cause and impact analysis of identified control deficiencies or gaps, and work with stakeholders to develop, execute, and monitor control remediation plans
- Provide guidance to IT control owners across the organization on the intended design, operation, and documentation of their assigned controls
- Make approved updates to IT control frameworks, control narratives, process flows, and other related compliance documentation as needed
- Develop a foundational understanding of our business processes and IT systems in order to provide insights and recommendations to management on enhancing IT controls, mitigating risks, and improving our overall IT governance and compliance posture
- Prepare accurate and insightful reporting for senior management and executive stakeholders
- Assist the Cybersecurity team with cybersecurity incident response as required and overall protection of information assets
- Stay current with emerging trends, technologies, and regulatory changes in the IT audit landscape
Ideal Experience
- Bachelor’s degree in information technology, computer science, business administration, or related field, with a minimum of 3 years of relevant experience in IT SOX compliance, IT audit, internal audit, risk management, or related field, preferably in a professional services firm or corporate environment
- Experienced in conducting IT audit procedures, including risk assessment, control testing, and audit documentation, using industry-leading tools and techniques
- Experienced in managing multiple workstreams simultaneously while meeting deadlines and delivering high-quality work products in a time sensitive environment
- Exceptional interpersonal skills with the ability to collaborate effectively with management, team members, and stakeholders at all levels of the organization
- Must be a US Citizen due to access to controlled information systems and security vulnerability information
- Flexibility to travel to Redwire sites in North America and Europe as needed and provide remote support across time zones from US Pacific Time (UTC-8) to Eastern European Time (UTC+3)
Desired Experience
- Experience with relevant IT audit and cybersecurity standards (e.g., CMMC, NIST, NIS2, ISO 27001, NASA, DOE or DHS Cybersecurity requirements)
- Master's degree or professional certifications (CISA, CISSP, CIA, etc.) are preferred but not required
- Experience in the aerospace or defense industry
- Experience working with US federal government contractors and associated requirements
- Experience working as an incident responder on an operational network
Grow with us as we innovate the next generation capabilities for a new era of space exploration! We offer a highly competitive benefits package along with a commitment to our core values of Integrity, Innovation, Impact, Inclusion, and Excellence.
Redwire is an Equal Opportunity Employer; employment with Redwire is governed on the basis of merit, competence, and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.
All offers of employment at Redwire are contingent upon clear results of a thorough background check and your ability to provide proof of eligibility to work in the US. Note that some positions will also require US citizenship or ability to obtain a security clearance due to requirements of a classified program.
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR Click Here
