Sr. Cyber Assurance Analyst, Finance

The role

You will work within Information Assurance to validate that systems, products, and processes meet security, regulatory, and compliance obligations. You will partner with engineers to collect and review technical evidence, manage risks, and provide technical support for finance systems.

What you will do

• Lead and support ITGC testing, SOC 1, SOC 2, SOX-related IT controls, and other relevant audits/certification efforts.
• Partner with engineers and system owners to gather, validate, and package technical evidence for security controls.
• Perform technical security and risk assessments of systems and IT infrastructure.
• Identify security controls, ITGC, and compliance gaps and advise on remediation.
• Maintain clear documentation of security controls, processes, risk assessments, and audit artifacts.
• Identify and drive assessment and audit efficiency through system integration, data analytics, and automation.
• Support third-party risk management efforts for suppliers.
• Identify and propose business-enabling actions by maintaining understanding of emerging security and IT risks.
• Mentor fellow teammates and take an active role in their development.

Required qualifications

• High school diploma or equivalency certificate.
• 5+ years of experience in cybersecurity compliance, audit or technical security roles with strong knowledge in security compliance frameworks.
• 5+ years of experience with control testing, security standards/policy development, security audits, or security risk management.
• Must be willing to travel domestically and internationally in support of audit and other assurance activities.
• Must be willing to work extended hours and/or weekends as needed.
• This role requires you to be onsite; remote/hybrid work will not be considered.

Nice to have

• Ability to interpret code/configurations, access controls, change records, and system/network designs for ITGC, SOC 1/SOC 2, and compliance implications.
• Experience with security and compliance tooling such as vulnerability scanners, SIEMs, access review platforms, change management systems, container security, and system configuration baseline checks.
• Hands-on experience with finance systems (ERP, general ledger, payment, or related platforms) and supporting ITGC/application control testing or certifications.
• Knowledge of U.S. and international regulatory and assurance requirements relevant to finance and IT (e.g., SOX, SOC 1, SOC 2, COSO, NIST, ISO 27001, GDPR, and related frameworks).
• Experience evaluating third-party risk (especially for finance/IT vendors), communicating with external stakeholders/auditors, and supporting mitigations.
• Strong communication skills across all organizational levels and ability to build cross-organizational coalitions.
• Direct experience with external audits, SOC examinations, regulatory compliance reviews, and management of audit evidence packages.
• Project and program management experience, tooling integration, and delivery in highly fluid environments.
• Professional certifications such as CISA, CISM, CISSP, CRISC, GSNA, ISO 27001 auditor, or equivalent (CISA and SOC/ITGC-focused credentials strongly preferred).

Benefits

• Company stock or long-term cash awards
• Potential discretionary bonuses
• Ability to purchase additional stock at a discount through an Employee Stock Purchase Plan
• Comprehensive medical, vision, and dental coverage
• 401(k) retirement plan
• Short and long-term disability insurance
• Life insurance
• Paid parental leave
• 3 weeks of paid vacation
• 10 or more paid holidays per year
• Paid sick leave

Before you apply

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, o

About the company

SpaceX is actively developing the technologies to make human life on Mars possible. The company was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not.