IT Auditor

Founded in 1920, Eastman is a global specialty materials company that produces a broad range of products found in items people use every day. With the purpose of enhancing the quality of life in a material way, Eastman works with customers to deliver innovative products and solutions while maintaining a commitment to safety and sustainability.

Responsibilities

• Execute risk-based audits that evaluate the design and effectiveness of information technology controls across the enterprise, including IT general controls, application controls, Sarbanes-Oxley (SOX) compliance, cybersecurity, and IT-dependent business processes.
• Lead or support audit engagements, involving scoping, planning, testing, identification of issues, and reporting.
• Plan, scope, and execute tasks required to complete audits as defined in lead or support auditor roles.
• Conduct audit procedures such as leading interviews, requesting and analyzing evidence, and documenting test steps in detailed, well-supported work papers.
• Evaluate the design and operating effectiveness of IT general controls (ITGCs), application controls, and key interfaces across platforms including ERP systems, operating systems, databases, and network infrastructure.
• Assess IT governance, risk management, and cybersecurity controls against established frameworks (e.g., COBIT, NIST, ISO 27001).
• Identify and evaluate audit issues and gaps using a risk-based approach.
• Meet with process management to discuss audit findings and gain agreement on management action plans.
• Partner with audit clients to identify constructive, value-added solutions that address issues identified.
• Coordinate business process audit testing with SOX testing to increase productivity and reduce duplication of effort.
• Perform issue remediation follow-up and testing to validate that management action plans have been effectively implemented.
• Perform process assessments and provide advisory services as requested by clients.
• Develop relationships with primary contacts for focus areas and share process knowledge and key learnings with other audit team members.
• Contribute to departmental projects and initiatives, identifying opportunities to improve processes and support corporate strategy.
• Identify improvement opportunities where automation and data analytic tools could streamline procedures and enhance analysis of results.
• Communicate IT audit findings to senior management.

Qualifications

• Bachelor’s degree in Information Systems, Accounting, Finance, Computer Science, or a related field.
• 3+ years of progressive experience in IT audit, public accounting, internal audit, related risk/controls function, or related IT experience.
• Solid understanding of IT general controls, application controls, and SOX compliance requirements.
• Working knowledge of the IIA International Standards for the Professional Practice of Internal Auditing.
• Familiarity with one or more IT governance and control frameworks such as COBIT, NIST CSF, or ISO 27001.
• Demonstrated ability to plan and execute audit engagements, manage time across multiple priorities, and meet deadlines with limited supervision.
• Strong interpersonal skills with the ability to build and maintain effective working relationships across all levels of the organization.
• Excellent written and verbal communication skills, including the ability to present complex technical issues to non-technical audiences clearly and concisely.
• Proficiency with Microsoft Office applications and experience with data analytics or audit management software (e.g., ACL, IDEA, Power BI, Tableau, or similar tools).
• Willingness to travel up to approximately 10–15%, primarily domestic.

Skills

• Professional certification or active pursuit of certification such as CISA (Certified Information Systems Auditor), CIA (Certified Internal Auditor), CISSP, or CRISC (preferred).
• Experience auditing cloud environments, cybersecurity programs, or operational technology (OT) systems (preferred).
• Experience auditing ERP environments (SAP preferred), operating systems, databases, and network security controls (preferred).
• Exposure to data analytics and continuous auditing techniques, including scripting or query languages such as SQL or Python (preferred).
• Experience working within a manufacturing or chemical industry environment (preferred).

Eastman will not accept applicants for this position who require visa sponsorship, including those whose status is F-1 visa OPT who subsequently would require ongoing visa sponsorship.