Req ID: 49304
Team: T51 CYBERSECURITY
Entity: Newport News Shipbuilding

US Citizenship Required for this Position: Yes

Full-Time
Shift: 1st
Relocation: No relocation assistance available
Virtual/Telework Opportunity: Yes - Occasional or hybrid telework available

Travel Requirements: No

Clearance Required: No - Clearance Not Required to Start

Salary Range: $93,000.00 to $117,000.00

The anticipated salary range represents the estimated base pay for this role. Final compensation will be determined based on experience, qualifications, and other job-related factors, and may vary from the posted range

The Role

Conducts a compliant validation process for quality information technology systems which requires formal validation documentation (including standard operating procedures) under appropriate federal regulations. Coordinates activities with clients, programmers/developers and operating personnel, domestic and, as appropriate, global. Identifies current and anticipated requirements for compliant computerized operations and suggests methods for the identification, implementation and maintenance of the procedures, actions and documentation necessary to assure compliance according to the appropriate federal and international regulations which govern the users applications. Reports on the status of validation activities to fulfill regulatory requirements . Keeps abreast of changing federal and international regulatory requirements, government audit policies, and the availability of current techniques.

Position Overview Newport News Shipbuilding is seeking a proactive mid-level IT SOX Compliance Analyst to evaluate IT risks, assess control design, and drive compliance across enterprise applications. In this role, you will act as a primary bridge between IT application owners and our internal and external audit teams.
Beyond core SOX testing, you will play a key role in IT general controls (ITGC) remediation and assist in identifying opportunities to automate compliance monitoring and testing workflows. We are looking for a critical thinker who actively asks probing questions, challenges assumptions, and advocates for robust compliance practices while maintaining collaborative relationships across IT operations.
Key Responsibilities
• Risk Evaluation & Control Testing: Plan, execute, and document ITGC and application control testing for critical enterprise systems, with emphasis on SAP and Optro environments.
• Audit Liaison: Serve as the functional point of contact for internal and external audit teams, coordinating data requests, walkthroughs, and status updates to ensure smooth audit execution.
• Application Owner Engagement: Partner with business and IT application owners to assess risks, clarify control requirements, and translate audit findings into actionable business solutions.
• Constructive Inquiry & Challenge: Review evidence critically, ask probing questions during testing, and constructively challenge control owners or audit inquiries when necessary to maintain accuracy and scope discipline.
• Remediation & Automation Focus: Work with IT owners to design and implement remediation plans for identified control deficiencies, while identifying opportunities to automate manual controls and compliance testing.
• Documentation & Reporting: Maintain comprehensive audit workpapers, track deficiency remediation, and provide status reporting to the IT SOX Compliance Manager.
• Bachelor's degree in Management Information Systems, Computer Science, Accounting Information Systems, Business Administration, or a related field.
• 3-5 years of hands-on experience in IT SOX compliance, IT audit, or IT risk management. Experience with SAP S/4 HANA and related applications
• Solid understanding of various IT environments, including Oracle, HANA, SQL, Unix, and Windows Active Directory and related controls
• Strong analytical mindset, excellent verbal/written communication, and the confidence to advocate for compliance standards with technical and business stakeholders.

Must Have

Bachelor's Degree and 5 years of relevant exempt experience;
Master's Degree and 3 years of relevant professional experience;
Ph.D. and 0 years of experience.

One of the following may be used as an equivalent to Bachelor's Degree for Information Technology Related Positions Only:

• NNS Apprentice School graduate
• Navy Nuclear Power School (NNPS) graduate
• Associate's Degree or other formal 2 year program and 2 years of relevant exempt experience or 4 years of relevant non-exempt experience
• Military Paygrade E-5 or above military experience
• High School/GED and 4 years combined of Manufacturing, Shipbuilding, Trades, Military experience or other relevant exempt experience
• High School/GED and 8 years combined of Manufacturing, Shipbuilding, Trades, Military experience or other relevant non-exempt experience
• A relevant professional certification can be substituted for a Bachelor's Degree.

Nice to Have

Professional certifications such as CISA, CRISC, or CIA (or progress toward attainment).

Background in identifying and implementing automated control monitoring or data-driven auditing techniques.