The right candidate will support the IT Audit Manager in assessing financial, operational, and regulatory risks relating to the company's use of information technology, evaluating controls over information systems, and providing control recommendations to IT Management and Internal Audit to reduce risks deemed unacceptable. The Senior IT Auditor analyst demonstrates a thorough understanding of the concepts, terminology, capabilities, and applications of technology, security risks, and control risks associated with various IT architectures.
Essential Duties and Responsibilities
Assesses IT risks through control auditing practices:
Documents IT processes
Conducts tests of Sarbanes-Oxley (SOX) IT controls
Conducts tests of non-SOX IT controls
Documents test activities and results
Reports test results to IT management and Internal Audit
Develops and Implements controls and Risk Management initiatives:
Provides control recommendations to IT Management and Internal Audit
Develops policy and standards in accordance with IT Governance
Designs frameworks and procedures in accordance with IT Strategy
Subject areas include:
IT Risk Assessment
IT Security (Logical, Network, Physical)
Change Management (Software, Hardware)
BCP / Disaster Recovery / Data availability
Software Acquisition and Development
Sarbanes-Oxley Compliance
General Controls and Application Controls
Qualifications
Education and/or Experience
Bachelor's degree (B. A.) from four-year college or university in Audit, Computer Science, or Management Information Systems
3 + years experience in IT Audit or IT Risk Management
Extensive knowledge of IT controls and best practices
Extensive knowledge of the IT Governance Institute's Control Objectives for Information and related Technology (COBIT) framework for IT governance
Extensive knowledge of the Sarbanes-Oxley Act of 2002
Possess a proven track record in the preparation/development of documentation and testing of internal controls and systems
Excellent written communication skills
Excellent relationship management skills
Ability to communicate effectively with internal management as well as external firms
Disciplined self starter who can work with minimal supervision
Familiarity with the IBM AS/400 security environment
Familiarity with auditing ERP applications
Preferred:
Professional certification (CISA, CIA, CISM) highly preferred
Big four experience
JDE application testing experience
#J-18808-Ljbffr
