Sr. Cyber Assurance Analyst, Finance

The role

You will work within Information Assurance to validate that systems, products, and processes meet security, regulatory, and compliance obligations. You will partner with engineers to collect and review technical evidence, manage risks, and provide technical support for finance systems.

What you will do

• Lead and support ITGC testing, SOC 1, SOC 2, SOX-related IT controls, and other relevant audits/certification efforts.
• Partner with engineers and system owners to gather, validate, and package technical evidence for security controls.
• Perform technical security and risk assessments of systems and IT infrastructure.
• Identify security controls, ITGC, and compliance gaps and advise on remediation.
• Maintain clear documentation of security controls, processes, risk assessments, and audit artifacts.
• Identify and drive assessment and audit efficiency through system integration, data analytics, and automation.
• Support third-party risk management efforts for suppliers.
• Identify and propose business-enabling actions by maintaining understanding of emerging security and IT risks.
• Mentor fellow teammates and take an active role in their development.

Required qualifications

• High school diploma or equivalency certificate.
• 5+ years of experience in cybersecurity compliance, audit or technical security roles with strong knowledge in security compliance frameworks.
• 5+ years of experience with control testing, security standards/policy development, security audits, or security risk management.
• Must be willing to travel domestically and internationally in support of audit and other assurance activities.
• Must be willing to work extended hours and/or weekends as needed.
• This role requires you to be onsite; remote/hybrid work will not be considered.

Nice to have

• Ability to interpret code/configurations, access controls, change records, and system/network designs.
• Experience with security and compliance tooling such as vulnerability scanners, SIEMs, access review platforms, change management systems, container security, and system configuration baseline checks.
• Hands-on experience with finance systems (ERP, general ledger, payment, or related platforms).
• Knowledge of U.S. and international regulatory and assurance requirements relevant to finance and IT.
• Experience evaluating third-party risk and communicating with external stakeholders/auditors.
• Strong communication skills across all organizational levels.
• Direct experience with external audits, SOC examinations, regulatory compliance reviews, and management of audit evidence packages.
• Project and program management experience, tooling integration, and delivery in highly fluid environments.
• Professional certifications such as CISA, CISM, CISSP, CRISC, GSNA, ISO 27001 auditor, or equivalent.

Benefits

• Company stock or long-term cash awards
• Potential discretionary bonuses
• Ability to purchase additional stock at a discount through an Employee Stock Purchase Plan
• Comprehensive medical, vision, and dental coverage
• 401(k) retirement plan
• Short and long-term disability insurance
• Life insurance
• Paid parental leave
• 3 weeks of paid vacation
• 10 or more paid holidays per year
• Paid sick time in compliance with state and federal law
• Company shuttles from select Seattle locations to the SpaceX Redmond office Monday to Friday

Before you apply

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, o

About the company

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.