The Internal Audit team is looking for a Senior Auditor Information Technology (IT) who is self-motivated, a strategic thinker and who thrives on challenges.
The Senior IT Auditor must have a thorough understanding of IT general and application controls and have an IT background with operational, risk, security and compliance experience.
The Senior IT Auditor will plan, execute and report on IT audit projects designed to assess internal control processes and operational performance.
Responsibilities:
Plan, execute and assist in the management of technology audits to identify and evaluate the company's controls over the confidentiality, integrity and availability of information assets.
Audit areas may include cloud computing, integrated business processes, IT general controls, IT service management, technology infrastructure, vendor management, cybersecurity, robotic process automation (RPA), and system upgrades and implementations.
Demonstrate and apply a thorough understanding of complex information systems.
Communicate audit observations and help operationalize audit remediation plans with business partners.
Contribute to the delivery of audit reports that articulate observations around the adequacy, efficiency and effectiveness of controls over cybersecurity and technology risks and related exposures.
Identify and report process improvements and efficiency opportunities to business partners.
Act as a department resource for IT knowledge and technology processes. Participate in department development opportunities, where possible, to implement process improvements and efficiencies (e.g., creation of audit scripts, automation opportunities, SQL Queries, data visualizations, etc.)
Proactively engage business partners to identify business and technology risk and maintain the team's audit universe. Leverage company's strategy and objectives and assist in the proposal of technology audit projects based on a risk assessment.
Track audit issues through coordination with business owners and other organization stakeholders.
As required, perform follow-up testing to validate closure of action items and resolution of original issues.
Experience and Competencies
Lead multiple projects simultaneously and effectively manage timelines to deliver high quality work products in a timely and efficient manner with limited supervision.
Technology background or knowledge of application development, application security, cloud computing, computer-based systems, cybersecurity, data analysis, databases, logical access, security management, and ability to develop effective IT audit programs.
Working knowledge of internal controls, internal controls frameworks and risk standards (COBIT, COSO, ISO27000, ITIL, NIST, CIS, etc.), Sarbanes Oxley Act (SOX), and EU-Global Data Protection Regulation (GDPR).
Bachelor's degree in either technology information systems, business intelligence, accounting, finance, or other equivalent experience.
5-7 years of IT audit experience with Big 4, national audit firm and/or global internal audit organization.
Experience working with scripting languages (PowerShell, SQL, Python, Visual Basic, etc.), data visualization platforms (Tableau, Microsoft BI, etc.), or analytics software (Alteryx, R, etc.) a plus.
Professional certification preferred - CISA, CISM, CGEIT, CRISC, CCSP, CISSP, CIA, CPA / CA, or equivalent.