Sr Internal Auditor - IT

About the role

The Senior Internal Auditor (IT) position is responsible for performing testing of Sarbanes-Oxley (SOX) 404 and Service Organization Control (SOC) controls for large and/or technically complex IT processes. Utilization of strong knowledge of the Sarbanes Oxley (SOX) Act is required to perform annual risk assessment and walkthroughs, identify suggested changes or implementation of key controls through new process design, and perform operating effectiveness testing in accordance with the annual IT Audit department schedule. In addition, effectively communication of issues and/or concerns to Internal Audit management and/or the Senior Lead Internal Auditor – IT is required throughout the course of the audits.

Responsibilities

• Leverage considerable knowledge and understanding of IT Internal Control frameworks and terminology (e.g., COSO, COBIT, ITIL); Process and Controls standard industry practices.
• Performs IT general and application controls testing and documents results.
• Update the auditing database in a timely manner, maintaining accurate record of the audit work performed, audit findings and observations, management responses, response due dates and the status of management’s corrective action.
• Provide feedback during planning and scoping of IT audits based upon an understanding of IT, business and accounting processes.
• Utilize strong knowledge of the requirements of the Sarbanes Oxley (SOX) Act to perform annual risk assessment and walkthroughs, identify suggested changes or implementation of key controls through new process design, and perform operating effectiveness testing in accordance with annual department schedule.
• Assist with the evaluation of adequacy and effectiveness of existing general and key controls around IT systems and applications for SOX compliance and develop and/or evaluate SOX test plans.
• Utilize judgment and prior experience to effectively communicate the relative importance of an audit issue and provide appropriate context to allow management to follow-up.