Sr Internal Auditor - IT

Position Summary

The Senior Internal Auditor (IT) position is responsible for performing testing of Sarbanes-Oxley (SOX) 404 and Service Organization Control (SOC) controls for large and/or technically complex IT processes. Utilization of strong knowledge of the Sarbanes Oxley (SOX) Act is required to perform annual risk assessment and walkthroughs, identify suggested changes or implementation of key controls through new process design, and perform operating effectiveness testing in accordance with the annual IT Audit department schedule. In addition, effectively communicating issues and/or concerns to Internal Audit management and/or the Senior Lead Internal Auditor – IT is required throughout the course of the audits.

Principal Responsibilities

• Leverage considerable knowledge and understanding of IT Internal Control frameworks and terminology (e.g., COSO, COBIT, ITIL); Process and Controls standard industry practices.
• Performs IT general and application controls testing and documents results.
• Update the auditing database in a timely manner, maintaining accurate record of the audit work performed, audit findings and observations, management responses, response due dates and the status of management’s corrective action.
• Provide feedback during planning and scoping of IT audits based upon an understanding of IT, business and accounting processes.
• Utilize strong knowledge of the requirements of the Sarbanes Oxley (SOX) Act to perform annual risk assessment and walkthroughs, identify suggested changes or implementation of key controls through new process design, and perform operating effectiveness testing in accordance with annual department schedule.
• Assist with the evaluation of adequacy and effectiveness of existing general and key controls around IT systems and applications for SOX compliance and develop and/or evaluate SOX test plans.
• Utilize judgment and prior experience to effectively communicate the relative importance of an audit issue and provide appropriate context to allow management to follow-up.
• Assist staff auditors in the identification, assessment, and reporting on exceptions to compliance with Company policy, procedures, standards and guidelines and weaknesses in internal control.
• Discuss audit results with Internal Audit management and/or Senior Lead IT Auditor when required in both written and verbal formats and recommends corrective action.
• Examine information technology (IT) processes and systems by evaluating control risks/gaps and providing management and process owners with recommendations for improvements to policies, procedures and practices.
• Develop ongoing positive relationships with the IT department management team.
• Demonstrate experience as a team leader: create a positive environment while meeting customer expectations and respecting the work-life quality of team members; providing candid, meaningful feedback, and identifying staff development opportunities in a timely manner; and keeping leadership informed of progress and issues.
• Perform other consulting, investigative, special project and job-related duties as assigned or apparent.

Preferred Qualifications

• 2+ years’ experience in any of the following areas: internal or external IT audit, ERP packages (i.e., SAP, Oracle Financials, Lawson), Crystal Reports, or IT security.
• Strong knowledge of IT general controls related to operations, information security and change management of systems software, application source code, network, and system database technologies.

Minimum Qualifications

• Experience testing automated and manual application controls (required).