About You - experience, education, skills, and accomplishments
- Bachelor’s degree in Information Technology, Computer Science, or related field
- 5+ years of experience in IT internal auditing and/or "Big 4" accounting, with at least 1 year(s) in a managerial/leadership role
- CISA (Certified Information Systems Auditor) and/or CISSP (Certified Information Systems Security Professional)
- IT Audit experience such as ISO 27001, Vulnerability & Patch Management, Systems Development Life Cycle, Access Management, Change and Release Management, IT Security, Cloud Controls, Backup and Recovery
It would be great if you also had...
- CIA, CISM, CRISC, CGEIT certification a plus, but not required
- Knowledge of IT governance frameworks, risk management, and internal control frameworks (e.g., NIST, ISO, COBIT, COSO)
- Data analytics experience (e.g., Power BI, SQL, CAATs, IDEA, ACL, Tableau, etc.) a plus, but not required
- Knowledge of auditing Data Loss Prevention program, Disaster Recovery, Network Management, Cloud Services, Encryption Technology, Mobile Technology, Application Security and Software Development Methodologies a plus, but not required.
- Familiarity with Oracle, NetSuite, Salesforce, and AWS a plus
- Strong knowledge of IT infrastructure, cybersecurity, and emerging technologies
What will you be doing in this role?
- You will be responsible for overseeing and executing comprehensive internal audits of our IT systems, infrastructure, and processes
- Identifying potential risks, implementing effective controls, and ensuring compliance with industry standards, regulations, and company policies
- You will work closely with our Technology leaders, including CIO organization and CISO, and business technology teams
- You will coordinate and facilitate the review of testing performed by the Internal Audit team as well as our co-sourcing partners
- Serve as a true subject matter expert, you will provide recommendations for areas of risk identified in the scope of audit work performed
- Work together as a key team member, you will contribute to other internal department initiatives, such as training and development, developing and completing operational audits, and other internal reviews, as requested