IT Auditor I/II/III/IT Audit Specialist, Sr

Responsible for placing safety as #1 priority in day-to-day work routine for self and others.

IT Auditor I/II/III: Conduct or assist in conducting audits or reviews of assigned information technology activities to ascertain whether the company's Information Technology general controls (ITGC) and application controls are properly designed and operating effectively. Conduct or assist in the audit or review the implementation or migration to new applications or technology. Conduct or assist in assessing the risk associated with company Information Technology and recommend processes, policies and procedures to ensure the security and reliability of the company's information technology environment. Build, develop and execute data analytics for internal audit.This includes data analytic projects and continuous monitoring techniques executed with consistency and overall strategy, policy and procedures of the company. Design and deliver analytics that increase the assurance of the audits while also providing insight into the operating effectiveness of the control environment. Work is usually done under close supervision and confidentiality of corporate information must be maintained.

Additional to the above, the IT Audit Specialist, Sr: Responsible for audit projects with a focus on the more challenging and complex assignments (very technical areas, information technology, cybersecurity and IT general control areas). Functions as a subject matter expert for IT/IS risk and controls. Provides guidance and recommends improvements to strengthen information technology, information security and operational controls and business processes.

This position provides the opportunity to work across a diverse technology environment, evaluating information technology general controls (ITGCs), application controls, cybersecurity practices, and emerging technologies to support the company's commitment to operational excellence and security. As an IT Auditor, you will participate in or lead audits and reviews of information technology processes, systems, and initiatives to assess the effectiveness of controls, identify opportunities for improvement, and provide meaningful recommendations. For the IT Audit Specialist, Sr level, the role expands to leading complex and highly technical audit engagements with a focus on information technology, cybersecurity, and IT risk management.

IT Auditor I ($63,860 - $79,830)

• Bachelor's degree, preferably in information technology or management information systems, but would consider accounting, business administration, or other relevant discipline.

IT Auditor II ($73,460 - $91,830)

• 
  

  Bachelor's degree, preferably in information technology or management information systems, but would consider accounting, business administration, or other relevant discipline; and

  
  
• 
  

  Two years' experience in data analytics, information technology, management information systems, or auditing or related work experience.

  
  

IT Auditor III ($84,460 - $105,570)

• Bachelor's degree, preferably in information technology or management information systems, but would consider accounting, business administration, or other relevant discipline; and
• Four years' experience in data analytics, information technology, management information systems, or auditing or related work experience.

IT Audit Specialist, Sr ($97,110 - $121,390)

• Bachelor's degree, preferably in information technology; or computer science, information security, management information systems, cybersecurity, or accounting; or equivalent experience; and
• Six years' experience in information technology, data analytics, IT risk management, IT governance and controls, or auditing three of which include technology risk experience.

IT Auditor II/III:

• 
  

  Certification as an Internal Auditor (CIA), Information Systems Auditor (CISA), Fraud Examiner (CFE), or similar certification is preferred.

  
  

IT Audit Specialist, Sr:

• 
  

  Certification as an Information Systems Auditor (CISA), Information Systems Security Professional (CISSP), Information Security Manager (CISM), Risk and Information Systems Control (CRISC), Governance of Enterprise IT (CGEIT), CSX Cybersecurity Practitioner (CSC-P), Data Privacy Solutions Engineer (CSX-P), Internal Auditor (CIA), Public Accountant (CPA), Fraud Examiner (CFE), or similar IT certification.

  
  
• 
  

  Previous experience evaluating emerging technology.

  
  

• 
  

  Must take all measures necessary to protect networks, devices, programs and data from cyber-attack, damage or unauthorized access.

  
  
• 
  

  May be required to maintain a valid driver's license.

  
  
• 
  

  Requires travel: Minimal (up to 10%).

  
  
• 
  

  Overtime is occasionally required.

  
  
• Must be legally authorized to work in the United States, no sponsorships considered.
• Subject to pre-employment drug testing and background checks.

JOB RESPONSIBILITIES

• Conduct or assist in conducting audits or reviews of assigned company activities including:
  
  
  
  • 
    

    Conduct audit interviews

    
    
  • 
    

    Gather audit data and evidence

    
    
  • 
    

    Prepare audit workpapers

    
    
  • 
    

    Develop audit findings and recommendations

    
    
  • 
    

    Prepare or assist with preparation of the audit reports

    
    
  • 
    

    Participate in entrance and exit conferences

    
    
  
  
  
  
• 
  

  Conduct assigned audit activities in accordance with the International Standards for the Professional Practice of Internal Auditing.

  
  
• 
  

  Analyze complex data, identify anomalies/trends/risks, and provide useable insight to improve internal controls.

  
  
• 
  

  Assist in designing data analytics protocols, standards, and tools, as well as distribution of analytics prior to and/or during audit fieldwork.

  
  
• 
  

  Helps and/or participates in other audits such as IT, financial, operational.

  
  
• 
  

  Performs other tasks and special projects as assigned.

  
  

Additional to the above, the IT Auditor II:

• Develop, implement, support, and maintain data analytics protocols, standards, and tools, as well as distribution of analytics prior to and/or during audit fieldwork.

Additional to the above, the IT Auditor III:

• Review the work of other auditors assigned to the project.

Additional to the above, the IT Audit Specialist, Sr:

• Responsible for audit projects with a focus on challenging and complex assignments (very technical areas, information technology, cybersecurity and IT general control areas).
• Functions as a subject matter expert for IT/IS risk and controls. Provides guidance and recommends improvements to strengthen information technology, information security, operational controls, and business processes.
• Research and studies best practice data analytics strategies. Work with Internal Auditing management to determine practices to implement.
• Consults with auditors and business personnel to develop and apply data analysis strategies (ex. regression, data visualization, benchmarking, hypothesis testing) to enhance audits. Responsible for writing complex programs, ad hoc queries, and reports. Ensures that all code is developed in a well-structured manner, includes sufficient comments, and is easy to maintain and reuse.
• 
  

  Coordinates and plans with external auditors.

  
  
• 
  

  Leads and/or participates in the annual IT risk assessment process.

  
  
• 
  

  Reviews designs, codes, and verification phases. Verifies code thoroughly for accuracy of intended purpose.

  
  
• 
  

  Explains technical considerations at related meetings, including those with internal clients and team members.

  
  
• 
  

  Contributes to audit fieldwork activities for overall process improvement and efficiencies.

  
  
• 
  

  Provides training and inter-departmental guidance to leverage and champion data analysis.