Sr Mgr, IT Audit

Select how often (in days) to receive an alert:

Location: New Orleans, Louisiana, United States

Company: Entergy

PS Job Title: Sr Mgr, IT Audit

Work Place Flexibility: Hybrid

Legal Entity: Entergy Services, LLC

Job Summary/Purpose

The IT Audit Senior Manager role will involve establishing strategic relationships with leaders throughout the company to proactively manage risks, improve internal controls, and drive value added outcomes that align with Entergy's vision and mission. The IT Audit Senior Manager will co-lead execution of the risk assessment process and audit plan. The role is also responsible for leading and ensuring the audit teams are using the latest approved practices, tools, and technology to evaluate the adequacy, effectiveness, and completeness of internal controls needed to minimize risk.

Job Duties/Responsibilities:

• Continuously assess risk and trends that could impact the company's strategic and business objectives. Conduct customer engagement meetings with executive and senior leaders to gain an understanding of their key business objectives and risk concerns. Help with the development and implementation of a dynamic audit plan that reduces risk for the company and that facilitates achievement of management's business and strategic objectives.
• Provide guidance to key company stakeholders to mitigate information technology (IT)/Cybersecurity risk and enhance IT/Cybersecurity internal controls. Set policy objectives over new technologies (like AI technologies, Robotic Processing Automation (RPA) and cloud hosting), people and processes. Recommend better practices to improve controls and results. Influence and advise process owners on practices that result in value (reduction of costs or risks).
• Co-lead the development and execution of the Internal Audit Strategic Plan.
• Directly manage a team of audit professionals to ensure projects are executed with the highest quality, on time, and in accordance with the IIA and other pertinent professional standards.
• Manage the co-sourced contract and audit partner hired to execute highly technical information technology projects.
• Review and approve audit reports, ensuring they are accurate, clear, concise, and relevant such that recipients readily understand issues and risks. Develop and deliver effective and persuasive presentations on complex topics to senior management.
• Manage and continuously improve the audit processes, people, and tools to meet all the IIA standards and other compliance standards while also providing value, efficiencies, and flexibility. Develop, coach, and mentor diverse audit team members.
• Utilize department resources effectively and efficiently to create value for the business. Establish measures and monitor performance of the audit teams. Assess Information Technology General Controls, Security controls, and the effectiveness of the SOX 404 control program. Provide assurances to management regarding the effectiveness of the IT/Cybersecurity control environment.
• Manage and continue to evolve the automation and data analytics program.
• Coordinate and work effectively with the external auditors, internal compliance groups (Chief Security Office, Cybersecurity, and IT) and governance committees (IT/Cybersecurity3 Lines of Defense, Third Party Management, etc.).

Minimum education required of the position

• Bachelor's Degree in Accounting, Business, Computer Science or related field; advanced degree a plus

Minimum experience required of the position

• Minimum of 10 years of audit experience; IT audit or IT security experience is a plus
• 5+ years of managerial experience is a plus

Minimum knowledge, skills and abilities required of the position

• Requires experience with IIA Audit Standards and best practices, implementation and support of Sarbanes-Oxley 404 control program, knowledge of IT general controls, COSO framework, Service Organization Control reports, ISACA and practices for information systems, NIST and other cyber risk frameworks, and CoBit or other leading control frameworks. Must have experience with data analytics tools to query data and support audits.
• Requires a detailed understanding of key technology tools and necessary controls, such as Data Loss Prevention, Threat and Vulnerability Management, Cloud Risk and Controls using CASB, RPA Bots, Identity Management, Application vulnerability scanners, Separation of Duties for IT functions, Change Management, PII Data, audit trails and trending, Vendor SLA management, etc.

Any certificates, licenses, etc . required for the position

Required designation as CIA, CISA, CISSP, CPA, or CFE; multiple designations is a plus

Other Attributes:

• Functional Knowledge: Requires an in-depth understanding of the application of audit principles, practices, concepts, and theories for financial, information technology, and operational processes as well as a knowledge of utility industry and risks.
• Business Expertise: Applies understanding of how to improve controls and mitigate risks for business processes and information technology that is accepted as a positive improvement by the business stakeholders.
• Leadership: Manages the audit team to complete the audit plan projects; sets measures and goals to evaluate team member's performance; adapts plans and priorities to complete the audit plan commitment to the audit committee.
• Problem Solving: Identifies sources of risk and opportunities for improving internal controls, business processes and information systems. Routinely uses root cause analysis to recommend impactful business changes. Obtains confidence from the functional business to implement the improvements.
• Impact: Recommends changes to stakeholders' business function that are recognized as adding value to the business such that the business functions seek out the advice and recommendations. Guided by latest industry best practices, policies, resource requirements, budgets and the business and audit plan.
• Interpersonal Skills: Exudes confidence based on knowledge and experience, influences, and persuades others either internally in other areas or externally with stakeholders, external auditors, or co-sourced auditors.

Other

• Not all aspects of the job are covered by the description – may require "other duties as assigned"
• Job may change over time in accordance with business needs
• Job description does not guarantee employment

Primary Location: Louisiana-New OrleansLouisiana : New Orleans
Job Function : Corporate
FLSA Status : Professional