Sr. IT Auditor
for sections present: About the role? The posting includes a description of Lenovo (company overview) then "Job Description" then responsibilities etc. We need to include sections only if real content.
We need to parse content: The posting includes:
- Company overview (We are Lenovo...). Could be "About the role"? Actually it's about company. Could be "About the role" heading? The instruction: use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have sections like About the role (maybe company overview), Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule.
We need to decide which sections have content.
From posting:
- Job Description: "This position is designed for a self-motivated professional..." That's more like overview of role. Could be "About the role".
- Key Responsibilities: includes many bullet-like sentences (though not bullet list). We need to convert to - . The responsibilities are described in paragraphs with sentences separated by periods. We need to extract each duty as list items. Probably each sentence or clause separated by period. We'll need to parse.
- There's also "Communication Collaboration", "Business Acumen", "Contribution / Leadership". Those could be sub-sections under Responsibilities or separate sections like Skills? Might be considered part of responsibilities or competencies. The instruction: prefer few substantive sections over many thin ones. So we could combine those under Responsibilities as they are responsibilities/behaviors.
- Basic Qualifications: list of degree, years experience, Big Four preferred, office requirement.
- Preferred Qualifications: list of knowledge, experience with platforms, tools, AI, flexibility, analytical skills, language, travel, certifications.
- No explicit Benefits, Pay, Schedule mentioned. So we should not create those sections.
- Also there is EEO boilerplate to remove.
Thus sections: About the role (company overview + job description intro?), Responsibilities (including all duty sentences), Qualifications (maybe combine Basic and Preferred? Could separate into Requirements and Qualifications? The instruction lists Requirements and Qualifications as possible headings. Basic Qualifications could be "Requirements". Preferred Qualifications could be "Qualifications" or "Skills". But we need to decide.
We have "Basic Qualifications" and "Preferred Qualifications". Could map Basic to "Requirements" and Preferred to "Qualifications" or "Skills". However "Skills" heading is also possible. The preferred qualifications include skills like analytical, problem-solving, writing, presentation, stakeholder-management, etc. So we could have a "Skills" section for those. But we also have technical skills like SAP, Power BI, etc. Could be under Qualifications.
Simplify: Use sections: About the role, Responsibilities, Requirements, Qualifications. That covers.
We need to preserve all substantive information, not invent or summarize away detail. So we need to include all details from Basic and Preferred qualifications as list items.
We must not repeat job title as heading (not present). No Job ID.
We must remove boilerplate: EEO statement, maybe also "We are Lenovo..."? That's company overview, keep as About the role.
We must not include navigation/legal etc.
We need to output only HTML fragment.
Let's extract content.
About the role: Could combine the company overview paragraph(s) and the initial job description sentence: "This position is designed for a self-motivated professional with strong knowledge of IT general controls and the capability to test automated controls. The individual will primarily support integrated audits as a senior contributor, independently lead assigned technology audit workstreams, and translate system and control matters into clear business risks and practical insights. The individual may also support general audits based on audit-plan and business needs."
That seems like role overview. We'll put that in
under About the role.
Responsibilities: Need to extract each duty from the "Key Responsibilities" section and sub-sections.
Let's copy the responsibilities text:
"Key Responsibilities
Project Delivery Technical Capabilities Apply risk-based thinking to identify, prioritize, and clearly articulate significant technology and business risks.Independently plan and execute assigned audit workstreams, applying sound judgment to risk assessment, scope, testing, analysis, and communication of results.Evaluate the design and operating effectiveness of IT general controls and automated controls relevant to the audit objectives and scope.Use data analytics, automation, and approved AI-enabled tools to improve audit coverage, efficiency, documentation quality, and insight generation while complying with Lenovo requirements for security, confidentiality, responsible AI, and professional judgmentPrepare accurate, complete, and review-ready workpapers that support clear, evidence-based conclusions. Complete assigned work within agreed milestones and promptly escalate significant quality, scope, evidence, or timeline concerns.Contribute to ongoing scope assessment and raise significant changes in risk or circumstances for timely consideration by the project manager.Support integrated audits by applying IT general controls and automated control testing expertise in the context of the relevant business processes and audit objectives. Communication Collaboration Communicate technical risks clearly, concisely, and in business-relevant language to audit leaders, process owners, and technology stakeholders.Lead walkthroughs, testing discussions, and result-alignment meetings for assigned workstreams. Present relevant facts objectively and escalate concerns in a timely manner.Build trusted working relationships across functions, geographies, and cultures while maintaining independence, professional skepticism, confidentiality, and respect.Collaborate effectively with general audit, technical audit, data enablement, subject-matter experts, external audit, and co-source specialists to deliver integrated assurance.Contribute ideas, reusable approaches, and lessons learned that improve audit quality, innovation, and scale. Business Acumen Develop a practical understanding of Lenovo's strategy, Hybrid AI priorities, operating model, products, services, enterprise systems, and major transformation initiatives relevant to assigned audits.Connect technology risks and controls to business outcomes such as resilience, security, regulatory compliance, data integrity, customer trust, operational efficiency, financial reporting, and strategic execution.Consider enterprise risk, company strategy, stakeholder perspectives, prior audit results, data insights, and external developments when assessing significance and tailoring audit work.Recommend pragmatic and sustainable improvements that address underlying risks and reflect cost, complexity, and business value. Contribution / Leadership Take ownership of assigned workstreams from planning through reporting and follow-up, with limited supervision.Demonstrate readiness to lead defined phases or smaller engagements when assigned, including coordinating work, tracking milestones, and maintaining quality.Coach less experienced auditors on IT general controls, automated control testing, documentation, and use of audit tools.Actively pursue continuous learning in enterprise systems, technology controls, automated control testing, Lenovo's business, and internal audit practices. Apply learning to improve current work and share it with others.Model Lenovo values, applicable professional standards, ethical behavior, objectivity, and accountability."
We need to split into list items. Each sentence seems separated by a period but there are some missing spaces after periods (like "...risks.Independently"). We'll need to insert spaces manually? We can just treat each sentence as separate item, ensuring we add a space after period.
Let's manually split:
1. Apply risk-based thinking to identify, prioritize, and clearly articulate significant technology and business risks.
2. Independently plan and execute assigned audit workstreams, applying sound judgment to risk assessment, scope, testing, analysis, and communication of results.
3. Evaluate the design and operating effectiveness of IT general controls and automated controls relevant to the audit objectives and scope.
4. Use data analytics, automation, and approved AI-enabled tools to improve audit coverage, efficiency, documentation quality, and insight generation while complying with Lenovo requirements for security, confidentiality, responsible AI, and professional judgment.
5. Prepare accurate, complete, and review-ready workpapers that support clear, evidence-based conclusions.
6. Complete assigned work within agreed milestones and promptly escalate significant quality, scope, evidence, or timeline concerns.
7. Contribute to ongoing scope assessment and raise significant changes in risk or circumstances for timely consideration by the project manager.
8. Support integrated audits by applying IT general controls and automated control testing expertise in the context of the relevant business processes and audit objectives.
9. Communicate technical risks clearly, concisely, and in business-relevant language to audit leaders, process owners, and technology stakeholders.
10. Lead walkthroughs, testing discussions, and result-alignment meetings for assigned workstreams.
11. Present relevant facts objectively and escalate concerns in a timely manner.
12. Build trusted working relationships across functions, geographies, and cultures while maintaining independence, professional skepticism, confidentiality, and respect.
13. Collaborate effectively with general audit, technical audit, data enablement, subject-matter experts, external audit, and co-source specialists to deliver integrated assurance.
14. Contribute ideas, reusable approaches, and lessons learned that improve audit quality, innovation, and scale.
15. Develop a practical understanding of Lenovo's strategy, Hybrid AI priorities, operating model, products, services, enterprise systems, and major transformation initiatives relevant to assigned audits.
16. Connect technology risks and controls to business outcomes such as resilience, security, regulatory compliance, data integrity, customer trust, operational efficiency, financial reporting, and strategic execution.
17. Consider enterprise risk, company strategy, stakeholder perspectives, prior audit results, data insights, and external developments when assessing significance and tailoring audit work.
18. Recommend pragmatic and sustainable improvements that address underlying risks and reflect cost, complexity, and business value.
19. Take ownership of assigned workstreams from planning through reporting and follow-up, with limited supervision.
20. Demonstrate readiness to lead defined phases or smaller engagements when assigned, including coordinating work, tracking milestones, and maintaining quality.
21. Coach less experienced auditors on IT general controls, automated control testing, documentation, and use of audit tools.
22. Actively pursue continuous learning in enterprise systems, technology controls, automated control testing, Lenovo's business, and internal audit practices.
23. Apply learning to improve current work and share it with others.
24. Model Lenovo values, applicable professional standards, ethical behavior, objectivity, and accountability.
That seems comprehensive.
Now Requirements (Basic Qualifications):
"Basic Qualifications
University degree in Information Systems, Computer Science, Information Systems, Accounting, Finance, Business, or a related discipline.
3+ years of relevant experience in internal audit, external audit, IT audit, IT controls, automated control testing, or a related field.
Big Four experience is preferred.
Must be able to come into the office x3 a week (Morrisville, North Carolina)"
We need to preserve all. Note duplicate "Information Systems" appears twice; we keep as is.
We'll make list items.
Now Qualifications (Preferred Qualifications):
"Preferred Qualifications
Strong knowledge of IT general controls and demonstrated capability to test automated controls and system-generated information used in business processes.
Experience with enterprise platforms such as SAP S/4HANA, SAP BPC, cloud platforms, identity and access management tools, or other major business systems is preferred.
Experience using data analytics and visualization tools such as Power BI, Excel, SQL, Python, or comparable tools is preferred. Experience responsibly using AI tools is also preferred.
Flexibility to support general and integrated audits across business areas such as sales, marketing, procurement, supply chain, finance, and human resources, applying risk-based audit skills beyond technology-specific reviews.
Strong analytical, problem-solving, writing, presentation, and stakeholder-management skills. Ability to explain technical matters to non-technical audiences is required.
Experience in a global, matrixed, high-technology, manufacturing, services, telecommunications, or similarly complex environment is preferred.
Fluency in English, including writing, speaking, and reading, is required. Additional language capability is preferred based on location and audit coverage.
Ability to travel approximately 20%, subject to business needs.
Preferred certifications include CISA, CISSP, CISM, CIA, CPA/ACCA, CFE, or equivalent credentials relevant to IT audit and integrated assurance."
We need to split into list items. Some sentences contain multiple ideas; we can keep each sentence as item.
Let's split:
1. Strong knowledge of IT general controls and demonstrated capability to test automated controls and system-generated information used in business processes.
2
- . The responsibilities are described in paragraphs with sentences separated by periods. We need to extract each duty as list items. Probably each sentence or clause separated by period. We'll need to parse.
- There's also "Communication Collaboration", "Business Acumen", "Contribution / Leadership". Those could be sub-sections under Responsibilities or separate sections like Skills? Might be considered part of responsibilities or competencies. The instruction: prefer few substantive sections over many thin ones. So we could combine those under Responsibilities as they are responsibilities/behaviors.
- Basic Qualifications: list of degree, years experience, Big Four preferred, office requirement.
- Preferred Qualifications: list of knowledge, experience with platforms, tools, AI, flexibility, analytical skills, language, travel, certifications.
- No explicit Benefits, Pay, Schedule mentioned. So we should not create those sections.
- Also there is EEO boilerplate to remove.
Thus sections: About the role (company overview + job description intro?), Responsibilities (including all duty sentences), Qualifications (maybe combine Basic and Preferred? Could separate into Requirements and Qualifications? The instruction lists Requirements and Qualifications as possible headings. Basic Qualifications could be "Requirements". Preferred Qualifications could be "Qualifications" or "Skills". But we need to decide.
We have "Basic Qualifications" and "Preferred Qualifications". Could map Basic to "Requirements" and Preferred to "Qualifications" or "Skills". However "Skills" heading is also possible. The preferred qualifications include skills like analytical, problem-solving, writing, presentation, stakeholder-management, etc. So we could have a "Skills" section for those. But we also have technical skills like SAP, Power BI, etc. Could be under Qualifications.
Simplify: Use sections: About the role, Responsibilities, Requirements, Qualifications. That covers.
We need to preserve all substantive information, not invent or summarize away detail. So we need to include all details from Basic and Preferred qualifications as list items.
We must not repeat job title as heading (not present). No Job ID.
We must remove boilerplate: EEO statement, maybe also "We are Lenovo..."? That's company overview, keep as About the role.
We must not include navigation/legal etc.
We need to output only HTML fragment.
Let's extract content.
About the role: Could combine the company overview paragraph(s) and the initial job description sentence: "This position is designed for a self-motivated professional with strong knowledge of IT general controls and the capability to test automated controls. The individual will primarily support integrated audits as a senior contributor, independently lead assigned technology audit workstreams, and translate system and control matters into clear business risks and practical insights. The individual may also support general audits based on audit-plan and business needs."
That seems like role overview. We'll put that in
under About the role. Responsibilities: Need to extract each duty from the "Key Responsibilities" section and sub-sections. Let's copy the responsibilities text: "Key Responsibilities Project Delivery Technical Capabilities Apply risk-based thinking to identify, prioritize, and clearly articulate significant technology and business risks.Independently plan and execute assigned audit workstreams, applying sound judgment to risk assessment, scope, testing, analysis, and communication of results.Evaluate the design and operating effectiveness of IT general controls and automated controls relevant to the audit objectives and scope.Use data analytics, automation, and approved AI-enabled tools to improve audit coverage, efficiency, documentation quality, and insight generation while complying with Lenovo requirements for security, confidentiality, responsible AI, and professional judgmentPrepare accurate, complete, and review-ready workpapers that support clear, evidence-based conclusions. Complete assigned work within agreed milestones and promptly escalate significant quality, scope, evidence, or timeline concerns.Contribute to ongoing scope assessment and raise significant changes in risk or circumstances for timely consideration by the project manager.Support integrated audits by applying IT general controls and automated control testing expertise in the context of the relevant business processes and audit objectives. Communication Collaboration Communicate technical risks clearly, concisely, and in business-relevant language to audit leaders, process owners, and technology stakeholders.Lead walkthroughs, testing discussions, and result-alignment meetings for assigned workstreams. Present relevant facts objectively and escalate concerns in a timely manner.Build trusted working relationships across functions, geographies, and cultures while maintaining independence, professional skepticism, confidentiality, and respect.Collaborate effectively with general audit, technical audit, data enablement, subject-matter experts, external audit, and co-source specialists to deliver integrated assurance.Contribute ideas, reusable approaches, and lessons learned that improve audit quality, innovation, and scale. Business Acumen Develop a practical understanding of Lenovo's strategy, Hybrid AI priorities, operating model, products, services, enterprise systems, and major transformation initiatives relevant to assigned audits.Connect technology risks and controls to business outcomes such as resilience, security, regulatory compliance, data integrity, customer trust, operational efficiency, financial reporting, and strategic execution.Consider enterprise risk, company strategy, stakeholder perspectives, prior audit results, data insights, and external developments when assessing significance and tailoring audit work.Recommend pragmatic and sustainable improvements that address underlying risks and reflect cost, complexity, and business value. Contribution / Leadership Take ownership of assigned workstreams from planning through reporting and follow-up, with limited supervision.Demonstrate readiness to lead defined phases or smaller engagements when assigned, including coordinating work, tracking milestones, and maintaining quality.Coach less experienced auditors on IT general controls, automated control testing, documentation, and use of audit tools.Actively pursue continuous learning in enterprise systems, technology controls, automated control testing, Lenovo's business, and internal audit practices. Apply learning to improve current work and share it with others.Model Lenovo values, applicable professional standards, ethical behavior, objectivity, and accountability." We need to split into list items. Each sentence seems separated by a period but there are some missing spaces after periods (like "...risks.Independently"). We'll need to insert spaces manually? We can just treat each sentence as separate item, ensuring we add a space after period. Let's manually split: 1. Apply risk-based thinking to identify, prioritize, and clearly articulate significant technology and business risks. 2. Independently plan and execute assigned audit workstreams, applying sound judgment to risk assessment, scope, testing, analysis, and communication of results. 3. Evaluate the design and operating effectiveness of IT general controls and automated controls relevant to the audit objectives and scope. 4. Use data analytics, automation, and approved AI-enabled tools to improve audit coverage, efficiency, documentation quality, and insight generation while complying with Lenovo requirements for security, confidentiality, responsible AI, and professional judgment. 5. Prepare accurate, complete, and review-ready workpapers that support clear, evidence-based conclusions. 6. Complete assigned work within agreed milestones and promptly escalate significant quality, scope, evidence, or timeline concerns. 7. Contribute to ongoing scope assessment and raise significant changes in risk or circumstances for timely consideration by the project manager. 8. Support integrated audits by applying IT general controls and automated control testing expertise in the context of the relevant business processes and audit objectives. 9. Communicate technical risks clearly, concisely, and in business-relevant language to audit leaders, process owners, and technology stakeholders. 10. Lead walkthroughs, testing discussions, and result-alignment meetings for assigned workstreams. 11. Present relevant facts objectively and escalate concerns in a timely manner. 12. Build trusted working relationships across functions, geographies, and cultures while maintaining independence, professional skepticism, confidentiality, and respect. 13. Collaborate effectively with general audit, technical audit, data enablement, subject-matter experts, external audit, and co-source specialists to deliver integrated assurance. 14. Contribute ideas, reusable approaches, and lessons learned that improve audit quality, innovation, and scale. 15. Develop a practical understanding of Lenovo's strategy, Hybrid AI priorities, operating model, products, services, enterprise systems, and major transformation initiatives relevant to assigned audits. 16. Connect technology risks and controls to business outcomes such as resilience, security, regulatory compliance, data integrity, customer trust, operational efficiency, financial reporting, and strategic execution. 17. Consider enterprise risk, company strategy, stakeholder perspectives, prior audit results, data insights, and external developments when assessing significance and tailoring audit work. 18. Recommend pragmatic and sustainable improvements that address underlying risks and reflect cost, complexity, and business value. 19. Take ownership of assigned workstreams from planning through reporting and follow-up, with limited supervision. 20. Demonstrate readiness to lead defined phases or smaller engagements when assigned, including coordinating work, tracking milestones, and maintaining quality. 21. Coach less experienced auditors on IT general controls, automated control testing, documentation, and use of audit tools. 22. Actively pursue continuous learning in enterprise systems, technology controls, automated control testing, Lenovo's business, and internal audit practices. 23. Apply learning to improve current work and share it with others. 24. Model Lenovo values, applicable professional standards, ethical behavior, objectivity, and accountability. That seems comprehensive. Now Requirements (Basic Qualifications): "Basic Qualifications University degree in Information Systems, Computer Science, Information Systems, Accounting, Finance, Business, or a related discipline. 3+ years of relevant experience in internal audit, external audit, IT audit, IT controls, automated control testing, or a related field. Big Four experience is preferred. Must be able to come into the office x3 a week (Morrisville, North Carolina)" We need to preserve all. Note duplicate "Information Systems" appears twice; we keep as is. We'll make list items. Now Qualifications (Preferred Qualifications): "Preferred Qualifications Strong knowledge of IT general controls and demonstrated capability to test automated controls and system-generated information used in business processes. Experience with enterprise platforms such as SAP S/4HANA, SAP BPC, cloud platforms, identity and access management tools, or other major business systems is preferred. Experience using data analytics and visualization tools such as Power BI, Excel, SQL, Python, or comparable tools is preferred. Experience responsibly using AI tools is also preferred. Flexibility to support general and integrated audits across business areas such as sales, marketing, procurement, supply chain, finance, and human resources, applying risk-based audit skills beyond technology-specific reviews. Strong analytical, problem-solving, writing, presentation, and stakeholder-management skills. Ability to explain technical matters to non-technical audiences is required. Experience in a global, matrixed, high-technology, manufacturing, services, telecommunications, or similarly complex environment is preferred. Fluency in English, including writing, speaking, and reading, is required. Additional language capability is preferred based on location and audit coverage. Ability to travel approximately 20%, subject to business needs. Preferred certifications include CISA, CISSP, CISM, CIA, CPA/ACCA, CFE, or equivalent credentials relevant to IT audit and integrated assurance." We need to split into list items. Some sentences contain multiple ideas; we can keep each sentence as item. Let's split: 1. Strong knowledge of IT general controls and demonstrated capability to test automated controls and system-generated information used in business processes. 2