Sr. IT Auditor

We need to output HTML fragment with headings

for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title. Must not include Job ID etc. Remove boilerplate, EEO, legal, application instructions. Keep substantive info. We need to parse the posting. Content: Intro: "It All Starts with Our People..." paragraph about Valvoline. That's about company culture, maybe "About the role"? Actually "About the role" heading could contain description of role and company. We'll include a paragraph summarizing that. Then "The Opportunity" section: description of Senior IT Auditor role responsibilities. That's responsibilities. Then "How You'll Make a Difference": bullet list of duties (preparing risk assessment, etc). That's also responsibilities. Then "What You'll Need to Succeed": list of qualifications (education, experience, certifications, skills). That's qualifications/requirements/skills. Then "We Take Care of the WHOLE You": list of benefits. Then "Your Path to Valvoline": includes EEO statement etc which we should remove (EEO/legal). Also includes accommodation request info (legal). Should remove. Also there is mention of "Pay" and "Schedule": not present. So we should not create those sections. Thus sections: About the role (intro), Responsibilities (combining The Opportunity and How You'll Make a Difference), Requirements (education/experience), Qualifications maybe overlapping, Skills (communication, problem solving, etc), Benefits. We need to avoid duplication. Let's extract. About the role: The first paragraph(s) before "The Opportunity". It includes: "It All Starts with Our People... We're not just in the car business; we're in the people business... highest priority is creating a welcoming workplace..." That's about company and role. We'll put as

. Responsibilities: Combine The Opportunity paragraph and the bullet list under "How You'll Make a Difference". The Opportunity paragraph: "The Senior Information Technology (IT) Auditor primarily leads the planning, fieldwork, and reporting phases of technical and process audit projects and Sarbanes-Oxley 404 compliance testing (SOX) in conformance with Internal Audit policies and procedures. The Senior IT Auditor role is responsible for identifying and evaluating key IT, Cybersecurity and Digital risks and controls through direct observation of and interaction with Valvoline IT, Cybersecurity and Digital personnel, processes and technologies. This role will be responsible for managing assigned audit projects, the audit staff assigned to the projects, and the relevant audit client relationships and for developing appropriate audit procedures to evaluate the efficiency and effectiveness of Valvoline's internal control environment, performing and/or overseeing detailed audit testing, cogently communicating issues to management, and making appropriate recommendations for improvement. The Senior IT Auditor is also responsible for ensuring appropriate and timely follow-up on management action plans from published audit reports." Then bullet list items under "How You'll Make a Difference": each line starting with a verb. We'll turn each into

. Requirements: Education and experience: "Bachelor's degree in computer science, Computer Engineering, Decision Science and Information Systems, Accounting/Management Information Systems or comparable major required. Post-graduate degree (e.g., Master of Science in Technology, Master of Business Administration, etc.) a plus. Minimum of 4 to 6 years of experience in internal or external auditing. Must possess or be committed to attaining at least one relevant professional certification (CIA, CISA, CRISC, CISSP, etc.). Sarbanes-Oxley (SOX) Act controls evaluation and testing capabilities required. Experience with SAP or comparable Enterprise Resource Planning systems required." Qualifications: maybe same as requirements? But we can separate: Qualifications could be "Strong verbal and written communication skills. Excellent problem-solving and analytical skills. Trusted business partner; earns respect of clients. Ability to work well in a dynamic, results-driven team environment required. Individual initiative, project management and multi-tasking skills required. Practical experience with data analytics and related tools (SAP Analytics Cloud, Power BI, etc.) preferred. Subject matter expert (SME) in one or more areas, and proactive at sharing that knowledge preferred. Experience working and partnering with external auditors preferred." Skills: maybe overlapping; but we can treat those as Skills. We need to avoid duplication: maybe combine Qualifications and Skills into one section? But instructions: use headings for those categories if content exists. We can have both Qualifications and Skills sections. Benefits: list from "We Take Care of the WHOLE You": Health insurance plans (medical, dental, vision), HSA and flexible spending accounts, 401(k), Incentive opportunity*, Life insurance, Short and long-term disability insurance, Paid vacation and holidays*, Employee Assistance Program, Valvoline Instant Oil Change discounts, Tuition reimbursement*, Adoption assistance*. Also note "*Terms and conditions apply, and benefits may differ depending on position." We should keep that note as part of benefits maybe as a

after list. We must not include EEO etc. Now produce HTML fragment:

About the role

...

Responsibilities

• ... each bullet from The Opportunity paragraph? Actually The Opportunity paragraph is prose; we could keep as

  then list for How You'll Make a Difference. But we need to use

  • for any list of duties/requirements/benefits. The Opportunity paragraph is not a list; we can keep as

    . Then the bullet list as

    . Thus:

    Responsibilities

    The Senior Information Technology (IT) Auditor primarily leads the planning, fieldwork, and reporting phases of technical and process audit projects and Sarbanes-Oxley 404 compliance testing (SOX) in conformance with Internal Audit policies and procedures. The Senior IT Auditor role is responsible for identifying and evaluating key IT, Cybersecurity and Digital risks and controls through direct observation of and interaction with Valvoline IT, Cybersecurity and Digital personnel, processes and technologies. This role will be responsible for managing assigned audit projects, the audit staff assigned to the projects, and the relevant audit client relationships and for developing appropriate audit procedures to evaluate the efficiency and effectiveness of Valvoline's internal control environment, performing and/or overseeing detailed audit testing, cogently communicating issues to management, and making appropriate recommendations for improvement. The Senior IT Auditor is also responsible for ensuring appropriate and timely follow-up on management action plans from published audit reports.

    • Prepare the Risk Assessment, Engagement Program, Work Program, Audit Objectives Memo, Draft Audit Report and perform other project management related activities (as prescribed by Internal Audit’s policies and procedures) for IT audit projects and management requests.
    • Work with client management to develop practical action plans that are appropriately designed to be successful cost-effective solutions to mitigate associated risks.
    • Review workpapers to evaluate planning, fieldwork, and testing results to verify that appropriate conclusions are reached about the adequacy of IT controls and the efficiency and effectiveness of IT systems / processes.
    • Lead the preparation, coordination, and completion of tests of design for IT General Controls (ITGCs) and automated controls that support relevant business processes, in particular related to Sarbanes-Oxley (SOX) and privacy compliance requirements.
    • Identify relevant test attributes and design appropriate test procedures to conduct / review tests of effectiveness for relevant ITGCs and automated controls, in particular related to Sarbanes-Oxley (SOX) and privacy compliance requirements.
    • Partner with management and external auditors in the coordination of testing and associated conclusions / results.
    • Provide technical assessments and risk and control insights for critical applications and IT processes during new system / process implementations.
    • Monitor audit client follow-up activities in accordance with timelines stated in final audit reports and proactively keep management apprised of progress.
    • Provide technical support to the Internal Audit Department for enabling systems / applications / tools.
    Then Requirements:

    Requirements

    • Bachelor's degree in computer science, Computer Engineering, Decision Science and Information Systems, Accounting/Management Information Systems or comparable major required.
    • Post-graduate degree (e.g., Master of Science in Technology, Master of Business Administration, etc.) a plus.
    • Minimum of 4 to 6 years of experience in internal or external auditing.
    • Must possess or be committed to attaining at least one relevant professional certification (CIA, CISA, CRISC, CISSP, etc.).
    • Sarbanes-Oxley (SOX) Act controls evaluation and testing capabilities required.
    • Experience with SAP or comparable Enterprise Resource Planning systems required.
    Qualifications:

    Qualifications

    • Strong verbal and written communication skills.
    • Excellent problem-solving and analytical skills.
    • Trusted business partner; earns respect of clients.
    • Ability to work well in a dynamic, results-driven team environment required.
    • Individual initiative, project management and multi-tasking skills required.
    • Practical experience with data analytics and related tools (SAP Analytics Cloud, Power BI, etc.) preferred.
    • Subject matter expert (SME) in one or more areas, and proactive at sharing that knowledge preferred.
    • Experience working and partnering with external auditors preferred.
    Skills: maybe we could combine but we already have Qualifications includes many skill-like items. Could we rename Qualifications to Skills? But we need both headings if content distinct. However the content we placed under Qualifications is mostly skills. Could we instead treat Qualifications as education/experience (requirements) and Skills as the soft skills list. Let's adjust: Requirements = education/experience/certifications. Skills = communication, problem-solving, etc. Qualifications maybe not needed. But we already used Requirements for education/experience. Let's move the soft skills to Skills. Thus:

    Skills

    • Strong verbal and written communication skills.
    • Excellent problem-solving and analytical skills.
    • Trusted business partner; earns respect of clients.
    • Ability to work well in a dynamic, results-driven team environment required.
    • Individual initiative, project management and multi-tasking skills required.
    • Practical experience with data analytics and related tools (SAP Analytics Cloud, Power BI, etc.) preferred.
    • Subject matter expert (SME) in one or more areas, and proactive at sharing that knowledge preferred.
    • Experience working and partnering with external auditors preferred.
    We can drop Qualifications section. Now Benefits:

    Benefits

    • Health insurance plans (medical, dental, vision)
    • HSA and flexible spending accounts
    • 401(k)
    • Incentive opportunity*
    • Life insurance
    • Short and long-term disability insurance
    • Paid vacation and holidays*
    • Employee Assistance Program
    • Valvoline Instant Oil Change discounts
    • Tuition reimbursement*
    • Adoption assistance*

    *Terms and conditions apply, and benefits may differ depending on position.

    We should not include Pay or Schedule sections. Now ensure we didn't include any boilerplate like EEO, legal, accommodation request. We removed those. Check for any leftover: The "Your Path to Valvoline" includes EEO statement etc; we removed entirely. Also removed "Join us in revolutionizing..." etc. That's promotional but maybe could be considered part of About the role? It's generic marketing; but we already have About the role paragraph; we could include that sentence as part of About the role? It says: "Join us in revolutionizing the automotive aftermarket industry while enjoying competitive benefits, a supportive work