IT Audit Manager

Responsibilities

• Lead and execute technology-focused audits with a strong emphasis on information security and IT risk management.
• Contribute to the development of the annual IT and Cyber Security audit plan based on enterprise risk.
• Design, develop, and execute continuous audit and automation initiatives.
• Involvement in analytical projects considering trends, deviations, or analyses for risk assessment.
• Prepare clear and concise reports and other communications for management based upon audit results.

Qualifications

• Minimum 6+ Years work experience in audit of cyber security controls, or information security with a strong audit focus, or a combination of both.
• Candidate must have a strong understanding of IT risk, controls, and compliance.
• Advanced knowledge of the current CIS 8.1 control framework is necessary, as well as a basic understanding of WLA SCS 2020, PCI DSS, and/or MUSL rules.
• Knowledge of Common Program Frameworks NIST CSF 2.0, NIS2, and GDPR are also necessary.
• 3-5 years of project lead experience, involving defining the risk, scope, and objective of the engagement, conducting walkthroughs, executing control testing, reviewing workpapers as well as effectively communicating project status and results to upper management.
• Professional auditing certification such as IT certification from ISC² (CISSP, CCSP, SSCP) and/or ISACA (CISA, CGEIT, CRISC) is strongly preferred, although equivalent experience may substitute.
• Excellent written and verbal communication skills, with all levels of the organization.
• Prior experience auditing or administering SAP systems (ECC, CRM, HANA, S/4).
• Motivated self-starter with logical, yet creative mindset.
• Strong analytical and research skills.
• Developed negotiation skills or resolution of issues.