About this role
SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.
SR. CYBER ASSURANCE ANALYST, FINANCE
Cyber Assurance is the practice of providing confidence that systems, products and processes meet security, regulatory and compliance obligations. It bridges governance with technical execution -- validating that controls are in place, risks are managed, and requirements are met for both internal and customer-facing systems.
As a teammate you will operate within Information Assurance, working closely with engineers to understand systems, how controls are implemented, be hands-on with collecting and reviewing evidence, and driving efficiencies and remediation efforts, along with providing technical support for finance systems
As an ideal candidate, you love living at the intersection of security, compliance, finance systems, and risk management. You thrive on rolling up your sleeves to dig into configs, access controls, change logs, system designs, and evidence packages while making sense of challenging, complex, or ambiguous requirements. You’re as comfortable explaining ITGCs, SOC1/2 and ISO frameworks, and risk concepts to non-technical and technical teams as you are reviewing a user access matrix, validating a change management control, or identifying an insecure default configuration. You are firm when it matters, but flexible in finding practical ways to move the ball forward. You excel at handling concurrent complex efforts and flourish in an environment where learning never ceases—where the breadth of operations ranges from rockets to financial ledgers, and ERP systems—and where teams are laser-focused on mission accomplishment. Excitement guaranteed.
RESPONSIBILITIES:
• Lead and support ITGC testing, SOC 1, SOC 2, SOX-related IT controls, and other relevant audits/certification efforts.
• Partner with engineers and system owners to gather, validate, and package technical evidence for security controls (access management, change management, computer operations, system development lifecycle, configurations, logs, etc.).
• Perform technical security and risk assessments of systems, supporting IT infrastructure, and related networks; identify deviations from security policy, standards, ITGC requirements, or regulatory expectations.
• Identify security controls, ITGC, and compliance gaps (especially those impacting financial reporting or SOC readiness), advise on remediation, and drive timely resolution with engineering and process owners.
• Maintain clear documentation of security controls, control processes, risk assessments, evidence, and audit artifacts.
• Identify and drive assessment and audit efficiency through system integration, data analytics/utilization, GRC tooling, automation, and process improvement.