Job description

• Participate in audit risk assessment, planning and audit scope development, as well as project execution as a critical team member on large, complex projects
• Provide SOX and compliance expertise and consulting to the organization, ensuring compliance with all SOX information technology internal controls, application controls, and key reports requirements
• Prepare and present reports and metrics to management, ensuring controls are accurately maintained and action plans are implemented within designated timelines for remediation
• Ensure systems, databases, applications, and IT processes comply with all SOX IT General Controls (ITGC)
• Support new system implementation and ensure compliance with existing policies
• Update process narratives annually through collaboration with business partners to ensure proper documentation of all significant processes
• Participate in special projects and initiatives
• Develop, implement, and maintain audit plans, systems and controls
• Present audit findings to management
• Drive successful completion of audit projects by closely coordinating with management, internal and external auditors, external consultants and business process owners
• Assist in the execution of audit department planning including risk assessment
• Provide performance feedback to staff auditors and create developmental plans for identified weaknesses
• Review audit work papers and draft reports prepared by audit staff
• Develop a thorough understanding of  policies, procedures and safety rules

Qualifications:

• Bachelor’s degree in Computer Science, Management Information Systems, Accounting, Business Administration or similar field of study required
• Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or other IT audit-related certification preferred
• 3+ years of experience with IT Sarbanes-Oxley (SOX) controls in an audit or IT controls implementation and maintenance capacity
• Experience working within an Internal Audit or Information Technology organization, supporting enterprise level IT functions and processes
• Experience executing audits within a complex organization that includes mainframe, distributed, and network platforms
• Knowledge of ERP systems, data warehouses and knowledge management systems
• General understanding of business analysis and project management
• Ability to perform risk assessments, develop audit plans, perform financial and operational audits, report results
• Knowledge of Sarbanes-Oxley, COSO and COBIT standards, GAAP, current audit practices, new legislation and regulatory requirements and internal auditing standards
• Demonstrate ability to plan and execute IT audits focused on general computer controls
• Familiar with IT applications, hardware and software systems, and software development life cycle (SDLC)
• Strong interpersonal, written and verbal communication skills to interface effectively with individuals at various levels
• Ability to remain organized, pay attention to detail, and meet critical deadlines
• Ability to work well under pressure while consistently meeting time sensitive deadlines
• Analytical with strong problem-solving abilities and creative resolution skills
• Ability to collect and analyze complex data, evaluate information, and draw logical conclusions
• Strong Microsoft Office experience, including Excel and Word