GE Aerospace

Bachelor's degree in computer science or in "STEM" Majors (Science, Technology, Engineering and Math) or Business Administration with a minor in Computer Information Technology is preferred.. Minimum of 3 years of professional experience in IT Governance, IT Risk, IT Audit, IT - Operations or related fields, preferably with a Fortune 1000 companies or Big 4 assurance organization.. CISSP, CEH, OSCP, CRISC, CCNP, GIAC certifications, or a combination of other information security certifications.. Proficient in common security tools and tactics such as NMAP, Shodan, Censys, OSINT, Nessus, Kali Linux, Metasploit, Maltego, Burp Suite, Nipper, and Network Detective Pro.. Experience with Industrial Control Systems/Supervisory Control/Internet of Things (ICS/SCADA/IOT) devices and software.

cyber security

Job Description Summary As the Sr. Technology Auditor, you will work collaboratively with business technology audit teams to provide centralized services and cyber security expertise as well as conduct technical and cybersecurity audit and advisory engagements across BU processes and technology through inquiry, data analysis, and in-depth technical testing. You will engage in planning activities, fieldwork, testing and identification of findings, analysis of results, crafting and communicating findings to management, developing remediation strategies in partnership with the business, identifying key themes and determining root causes across different business audits. You will also assist with the development of testing and reporting materials and be able to validate remediation action plans. Job Description In This Role You Will <ul><li> Execute IT and cyber focused technical audits and advisories (e.g., external discovery and reconnaissance) leveraging toolkits in order to identify risks and control deficiencies. </li><li> Assist in developing centralized subject matter expertise for technology and cyber risk assessment methodologies. </li><li> Identify security or control breakdowns and provide recommendations on how to minimize or address risks with relevant technical solutions across networks, systems, applications, etc. </li><li> Develop risk and threat models to illustrate potential attack vectors and exploitation of enterprise networks. </li><li> Collaborate across audit teams to build a contemporary, comprehensive, and efficient audit program including templates, technical testing methodologies, and in-depth technical guidance. </li><li> Perform offensive Cybersecurity tasks such as attack mitigation, ethical hacking, and threat detection etc. </li><li> Own the team’s cloud-based lab environment for testing/learning tools and audit methodologies and a ssists in piloting tools and technology used by audit teams in fieldwork. </li><li> Support design and implement lines of defense structures across enterprise organizations to drive continuously improving governance and risk management. </li><li> Act as a trusted advisor across technology and non-technology audit teams and leaders to translate cyber topics into business context and educate teams on overall understanding of GE’s security posture. </li><li> Support analysis activities to review cross-functional and cross-business unit cyber related audit findings to identify systemic issues and opportunities for leadership and business owners to improve control framework implementation and management. </li><li> Enhance, align, maintain, and educate businesses on cyber threat, program, control, and risk frameworks in coordination with audit teams and GE technology/cyber teams. </li><li> Provide expertise around current and appropriate research regarding emerging technology risk topics and serve as the subject matter expert on cyber threats relevant to GE. </li><li> Review audit workpapers to ensure they are clear, complete, and well-organized. </li><li> Conduct in-depth inquiry and data analysis to understand complex cyber and technology operations, assess risk based on industry risk profile, and develops project scope for complex and cross-functional process areas, leveraging business knowledge and expertise. </li><li> Demonstrate a strong technical background and be proficient in one or more of the following disciplines: network security, information security engineering and system administration, attack mitigation and application security with proven experience performing vulnerability assessments and evaluating and testing security configurations, and lateral movement techniques, threat identification and exploitation and/or breach identification and response and capable of identifying intrusion or attack paths </li></ul>Minimum Requirements <ul><li>Bachelor’s degree from accredited university or college with minimum of 2 years of professional experience OR associate degree with minimum of 5 years of professional experience OR High School Diploma with minimum of 7 years of professional experience</li><li> Bachelor's degree in computer science or in "STEM" Majors (Science, Technology, Engineering and Math) or Business Administration with a minor in Computer Information Technology is preferred. </li><li> Minimum of 3 years of professional experience in IT Governance, IT Risk, IT Audit, IT - Operations or related fields, preferably with a Fortune 1000 companies or Big 4 assurance organization. </li><li>Note: Military experience is equivalent to professional experience. </li></ul>Note: The salary range for this position is $110,700- $184,600 The specific salary offered to a candidate may be influenced by a variety of factors including the candidate’s experience, their education, and the work location. In addition, this position is eligible for a performance bonus/variable incentive plan. GE provides a comprehensive benefits package that provides access to plans which support the overall wellbeing of our employees and their dependents. These benefits include, but are not limited to, healthcare coverage (medical, dental, vision, pharmacy), a retirement plan that includes Company Retirement Savings and a 401K with Company matching, Life Insurance options, Disability coverage, paid time-off, EAP, and more. Eligibility Requirement <ul><li>Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job. </li></ul>Desired Characteristics <ul><li> Hands-on technical experience building and maintaining systems along with strong offensive Cybersecurity skills such as attack mitigation, risk assessment, and i mplementation and/or administration of technical systems.</li><li> Hands-on Cybersecurity experience, including offensive Cybersecurity methodologies and activities such as ethical hacking, attack mitigation, and network security control. </li><li> Knowledge of a combination of any of the following inclusive of Cyber Control Frameworks (NIST 800-53, CIS Top 20, etc.); Cyber Program Frameworks (ISO 27001, NIST CSF, etc.); Cyber Risk Management - Frameworks (FAIR, ISO 27005, NIST 800-39, 800-37, 800-30, etc.) preferred. </li><li> CISSP, CEH, OSCP, CRISC, CCNP, GIAC certifications, or a combination of other information security certifications. </li><li> Strong understanding and experience of managing technology risk within the context of industrial and highly regulated environments preferred. </li><li> Proficient in common security tools and tactics such as NMAP, Shodan, Censys, OSINT, Nessus, Kali Linux, Metasploit, Maltego, Burp Suite, Nipper, and Network Detective Pro. </li><li> Experience with Industrial Control Systems/Supervisory Control/Internet of Things (ICS/SCADA/IOT) devices and software. </li><li> Lean Process orientation is a plus; passion to help improve operations continuously. </li><li> Quantitative and qualitative analysis skills; ability to take large volumes of complex information and present it in a clear and concise manner; uses data and a cogent problem-solving methodology in decision making and impact assessment are a plus. </li><li> Ability to foster cross-disciplinary collaboration throughout the organization. Capability to work with minimal supervision with a multi-disciplinary team in a fast-paced environment and meet strict deadlines while managing multiple priorities. </li><li> Excellent active listening, verbal, written, and presentation communication skills across both technical and non-technical audiences. </li></ul>Additional Information GE offers a great work environment, professional development, challenging careers, and competitive compensation. GE is an Equal Opportunity Employer . Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law. GE will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable). As a federal government contractor, GE may in the future be required to have U.S. employees fully vaccinated against COVID-19. Some GE customers currently have vaccination mandates that may apply to GE employees. Relocation Assistance Provided: No Note: To comply with US immigration and other legal requirements, it is necessary to specify the minimum number of years' experience required for any role based within the USA. For roles outside of the USA, to ensure compliance with applicable legislation, the JDs should focus on the substantive level of experience required for the role and a minimum number of years should NOT be used. This Job Description is intended to provide a high-level guide to the role. However, it is not intended to amend or otherwise restrict/expand the duties required from each individual employee as set out in their respective employment contract and/or as otherwise agreed between an employee and their manager. <ul><li> This is a remote position </li></ul>#Cybersecurity #Attackmitigation #Cyber #ITAudit #Cyberaudit #InformationTechnology #IT #Assurance Additional Information GE offers a great work environment, professional development, challenging careers, and competitive compensation. GE is an Equal Opportunity Employer . Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law. GE will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable). Relocation Assistance Provided: No <ul><li> This is a remote position </li></ul>

START NEW SEARCH