Job IT Auditor

IT Auditor

Audits and evaluates the effectiveness of risk management, control and governance processes using a systematic, disciplined approach. Audits the activities of various departments (primarily Technology, Data, & Security) for compliance with plans, policies, procedures, regulatory requirements and best practices. Prepares reports and recommendations based on the results of audit procedures performed. While this position is primarily focused on performing IT-related audit activities, responsibilities may span across multiple areas (e.g., business processes, compliance, financial, etc.) depending on business needs.

Level of responsibility: Complex responsibilities related to primary focus of job area. Uses best practices and in-depth business knowledge to solve complex problems and improve products or services. May adapt procedures, processes and techniques to meet the more complex requirements of position.

Essential functions:

• Perform the planning, fieldwork, and reporting stages of audits focused on testing key SOX controls as well as other operational audits as assigned by management.
• Perform a risk analysis of each audit area during the planning stage in order to identify key risks of the audit area and how the audit plan will address identified risks.
• Create detailed audit programs that are designed to achieve audit objectives.
• Partner with other members/departments to complete audit workpapers (e.g., obtain supporting documentation, prepare/document testing, prepare detailed explanations, achieve consensus on testing exceptions and reporting outcomes, etc.).
• Coordinate with other departments to resolve complex auditing problems.
• Lead in identifying the appropriate auditing and reporting methods that achieve department and company objectives.
• Monitor the implementation of moderate to complex system and/or technology changes.
• Provide informal coaching, review feedback, and knowledge sharing to less experienced auditors to support team development and audit quality.
• Evaluate internal control deficiencies, assess root cause and risk impact, and support management discussions regarding severity, remediation, and conclusions.
• Draft internal audit reports and lead audit closing meetings with other members/departments.
• All other duties as assigned.

Requirements:

Senior: Bachelor's degree and 2 years public accounting experience (big four preferred); OR Bachelor's degree in Accounting, Finance, Information Systems, Information Technology, or related discipline, and 5 years directly related experience. Internal control auditing/testing experience. Certified Public Accountant, Certified Internal Auditor or Certified Information Systems Auditor.

Staff: Bachelor's degree and 1 year public accounting experience (big four preferred); OR Bachelor's degree in Accounting, Finance, Information Systems, Information Technology, or related discipline, and 2 years directly related experience. Internal control auditing/testing experience.

Working conditions: Office environment. May work non-standard hours. Requires continuing education to maintain current knowledge and certification(s). Computer usage for extended durations. Travel to other locations, including overnight stays, may be required occasionally.

Knowledge, skills and abilities (KSAs): Deep knowledge and experience executing the various stages of the audit process and SOX compliance requirements. Ability to identify SOX and operational audit risks and develop the appropriate responses throughout the audit process. Ability to develop detailed audit programs for SOX and operational audits that are designed to achieve audit objectives and address identified risks. Demonstrated ability to partner with other members/departments in order to achieve audit objectives, facilitate consensus on complex and/or sensitive audit findings, and efficiently finalize audit projects. Demonstrated flexibility by adapting audit plans and procedures in response to changing risks, business priorities, and evolving technologies. Strong attention to detail and ability to produce clear, well organized, and review ready audit documentation in accordance with internal standards and external audit expectations. Proficiency with audit tools, data analysis techniques, and GRC platforms (e.g., AuditBoard, ServiceNow, or similar). Proficient Excel skills.

Licenses and certifications: Required Certifications/Licensures: (Certified Public Accountant, Certified Internal Auditor or Certified Information Systems Auditor)

Health and safety (medical/DOT requirements): Pre-Employment Drug Screen