The Senior IT Auditor will oversee the testing and analysis of general computer control (GCC), regulatory controls and meet with auditing controls operators. Assess risk posed by potential findings and present the finding to the auditees and senior management. You will also need to stay aware of any emerging technology and risk.
Essential Responsibilities:
Performs general and application control reviews for simple to complex computer information systems inclusive of system security, change controls, backup and disaster recovery, etc.
Performs SOX control testing for a multitude of ERP systems including SAP and Oracle.
Knowledge of, and ability to, use and maintain TeamMate audit software.
Creates and uses RPAs and scripts to automate testing.
Prepares audit findings and working papers to ensure that adequate documentation exists to support the completed audit and conclusions.
Prepares and presents written and oral issues/reports and other technical information in a pertinent, concise, and accurate manner for distribution to management.
Maintains currency of knowledge with respect to relevant state-of-the-art technology, equipment, and/or systems.
Qualifications/Requirements:
Bachelor's Degree in Information Technology, Computer Science or related technical discipline
5+ years of experience in internal or external IT auditing, and/or relevant experience
CISA, CISM, CIA, or CISSP certification required - must be complete and active
Extensive knowledge of IT audit procedures, including planning, techniques, test and sampling methods is required
Technical experience with various types of hardware configurations, operating systems and application software including SAP
Demonstrated technical experience is required: use of Windows, Active Directory, Firewalls, and SAP
Strong experience writing Audit Programs/Controls is required - must demonstrate ability to performapplication audit,
implementation audit, general computer controls (GCC)/Network Audit, SOX audit
Desired Characteristics:
Experience with Oracle and Unix is a plus
Advanced PC and ERP skills
Understanding of IT audit procedures, techniques, internal control concepts, risk based and agile auditing
Strong technical, analytical and decision-making skills
Effectively manage competing priorities simultaneously