Senior IT Auditor

Introduction
...


Overview
We're always looking for talent that believes in having fun. At PENN Entertainment, you'll get to be a part of an exciting industry, where the days and nights are fast paced. You'll work with an incredibly diverse set of coworkers driven by their enthusiasm for helping people find and have more fun. You'll also get to work at a company that cares about your career growth and will help you get the support you need to expand your possibilities.


Initial placement within the salary range is based on an individual's relevant knowledge, skills, and experience. Base salary is just one component of our competitive Total Rewards package, which includes wellness programs designed to support our team members' financial, physical, and mental well-being. Specific benefits-such as day-one medical coverage, 401(k) matching, and annual performance bonus-may vary by position. Paid time off is earned according to the local policy and increases with the length of employment.

Click HERE to discover how we empower team members to grow, thrive, and advance in their careers.

Responsibilities
The IT Internal Auditor audits information systems, platforms, and operating procedures in accordance with established corporate standards for efficiency, accuracy and security. This role also evaluates IT infrastructure in terms of risk to the organization and establishes controls to mitigate loss, determines and recommends improvements in current risk management controls, and is responsible for implementation of system changes or upgrades at the Corporate office.

• Prepares and follows audit programs to conduct audits in accordance with the annual audit plan. Responsible for developing test procedures for IT general controls, automated business process controls, and key reports. Make improvements as needed. Performs technical assessments/analyses of systems, general controls and application systems using risk assessment techniques.
• Identifies risk factors of automated functions and controls, related manual procedures and general control environment; analyzes selected functions, controls, etc. to determine exposures.
• Responsible for the overall preparation, review, and execution of organization-wide IT Sarbanes Oxley (SOX) control tests including IT general controls, automated business process controls, and key reports. Maintain and keep up to date SOX testing tools with accurate test procedures, results of test work, evidence, conclusions, etc. Assists with development of SOX content and general controls.
• Analyzes data obtained for evidence of deficiencies in controls, duplication of efforts, extravagance, fraud, or lack of compliance with the law, government regulations, and management plans, policies or procedures. Makes improvements as needed and escalates issues to manager.
• Presents audit issues to Internal Audit Management for the development of reports and recommendations.
• Performs observations of departmental procedures to ensure compliance and operational efficiencies.
• Completes audit files with working papers referenced to the audit programs.
• Liaises with external auditors to communicate information and resolve problems.
• Presents audit issues to the Internal Audit Manager for the development of reports and recommendations.
• Maintains audit files, ensures files contain planning memos, programs and reports and follows up to ensure audit recommendations have been followed.
• Assists in analyzing data obtained for evidence of deficiencies in controls, duplication of efforts, extravagance, fraud, or lack of compliance with law, government regulations and management plans, policies or procedures.
• Assists in planning the theory and scope of audits and related audit programs.
• Enthusiastically supports, actively promotes and demonstrates superior customer service in accordance with department and company standards and programs.
• Participates in meetings and training as required.
• Maintains complete confidentiality of all company information at all times.
• Ensures that behavior and appearance are in compliance with established standards.
• Maintains a professional work environment with management and staff.
• Performs all job duties in a safe and responsible manner.
• Responsible for ensuring the compliance with all regulatory compliance within area of responsibility and reporting potential issues to management.

Requirements
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Must be at least 21 years of age.

• Bachelor's degree (B.A./B.S.) from a four-year college or university in Finance, Accounting, or related field required. CPA, CIA, CITP, or CISA certification strongly desired.
• Must have two or more years' experience with SOX 404 compliance and internal controls evaluation that followed a controls framework (i.e. COSO, COBIT, NIST, all phases of IT audit planning, evaluation, documentation, testing and remediation. Familiarity with PCI Data Security Standards version 3.1 required.
• Must have minimum of three years of combined technology and Internal Audit experience and/or training within a public accounting and/or internal audit function. Familiarity with standards, concepts, practices and procedures with Sarbanes-Oxley Act, gaming and/or pari-mutuel wagering is preferred.
• Must be able to travel up to 30%.
• Must have advanced skills in Microsoft applications (Word, Excel, PowerPoint, and Outlook).
• Must possess excellent verbal and written communication skills.
• Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals. Ability to compute rate, ratio, and percent and to draw and interpret bar graphs
• Ability to effectively present information and respond to questions from groups of managers, clients, customers, and the general public.
• Ability to write reports, business correspondence, and procedural manuals.
• Must have the ability to interact with guests, staff and colleagues and resolve problems and conflicts in a diplomatic and tactful manner.
• Must be able to maintain confidentiality and a high level of professionalism at all times.