Internal Auditor

Internal Auditor

GTT is a leading networking and security as a service provider for multinational organizations, simply and securely connecting people and machines to data and applications – anywhere in the world. We serve thousands of organizations, bringing together the right people, partners and technology to reduce the burden on IT teams and solve the most pressing networking and security challenges. Built on our top-ranked global Tier 1 network, GTT Envision is a single global technology platform to connect, orchestrate, virtualize and automate enterprise networks, enabling customers with consumable solutions to achieve business missions and meet ongoing demand when, where and how needed. Our portfolio includes SASE, SD-WAN, security, internet, voice and other connectivity options, complemented by a suite of professional services and exceptional sales and support teams in local markets around the globe. We partner with our customers to deliver Greater Technology Together.

The Internal Auditor promotes, develops, and manages the Company's Internal Audit program by conducting internal audits against the relevant Management System Standards (ISO 27001; ISO 20000-1; ISO 22301) and other frameworks and assurance audits (SOC 1 and SOC 2; PCI DSS). The Internal Auditor facilitates the evidence gathering process for external audits and ensures that external and internal findings are addressed on time by the relevant owners within the Organization. The Internal Auditor drives continuous improvement throughout the organization and facilitates the creation, implementation, review, and auditing and of all business processes within the Organization.

The Internal Auditor will interact with all teams and departments at GTT when performing internal audits and might request evidence for compliance with the applicable standards from anyone in the Organization in scope of the certification. The Internal Auditor reports to the Senior Manager, Audit and Compliance. The Senior Manager, Audit and Compliance is ultimately responsible for the Internal and External Audit Programs. The Senior Manager, Audit and Compliance organizes the external audits and communicates with the external auditors/certification bodies.

Duties and Responsibilities:

• Gathering evidence from various departments and reviewing the evidence before submission to external auditors.
• Preparing relevant teams for external audits.
• Conducting internal audits, gap assessments and regular checks to evaluate GTT compliance with ISO standards and other assurance audits relevant to the organisation, which can include SOC 1 & SOC 2, PCI DSS, SOX ITGC, NIST, NIS2, GDPR, etc.
• Completing internal audit reports and gap assessment checklists and updating the GRC tool.

Continuous Improvement:

• Managing the Corrective Action Log (CAL): ensuring findings are tracked; obtaining updates from action owners and following up through the completion of findings.
• Follow up on actions from the CAL weekly meetings and updating the GRC tool accordingly.
• Facilitating in conjunction with the internal audit team the completion of a root cause analysis for non-conformities to ensure the underlying issues are fully understood and appropriate actions are taken to resolve the issue.
• Completing an effectiveness review after the implementation of the corrective action relating to a non-conformity to verify the corrective action has successfully resolved the issue.
• Produce reports for Management Review meetings; analyze the data and identify any trends in terms of findings with the Senior Manager, Audit and Compliance.
• Manage and continuously improve the Management System.

Required Experience/Qualifications:

• Working knowledge of ISO Management systems (ISO 20000-1, ISO 27001, and ISO 22301).
• ISO 20000-1 and ISO 27001 Internal/Lead Auditor Certification is desirable.
• Experience of internal auditing, reporting, findings status tracking/resolution.
• SOC 2 auditing/testing/collecting evidence experience is desirable.
• ISO 22301; PCI DSS, NIST, GDPR, SOX ITGC experience is a plus
• Work experience with GRC tools; SharePoint

Desirable Experience/Qualifications:

• Experience of working in the IT industry or Telecommunications sector is desirable
• Good Document management skills
• Experience of process mapping
• Pragmatic, able to make sensible and easily implemented business decisions
• Able to handle pressure and work alone or as part of a team whilst taking personal ownership and accountability to set priorities and meet strict deadlines
• Excellent organizational, communication (both oral and written), interpersonal and analytical skills with an ability to communicate at all levels within the organization
• Good attention to detail
• Personal commitment to deliver to a high standard and ability to motivate and teach others

Hours/Travel/Shift:

Regular working hours. Remote working is acceptable. Travel to GTT office locations might be required sometimes for internal audits or to support external audits in GTT's offices.