The IT Senior Internal Auditor will be primarily responsible for performing complex, value-added professional internal auditing work. Work involves supporting the planning and execution of the organizations audit plan, as well as performing IT, operational, compliance and financial audits; providing consulting services to the organization's management and staff; providing key input with the internal audit risk assessment, and with the development of the annual audit plan; providing training and supervision to Internal Audit (IA) staff and Guest Auditors (GA). Additionally, leading or assisting a team of auditors in testing the design and effectiveness of IT General Controls (ITGC), IT Application Controls (ITAC), and Key Reports of the company's internal control framework (ICF). The candidate must be able to function independently under general supervision with reasonable latitude for initiative and independent judgment. This position reports to the IT Senior Internal Audit Manager. Detailed Description: * Under the direction of the IT Manager: plan, organize, and execute IT audit engagements of internal controls in critical areas, such as; SDLC, change management, application controls, technology infrastructure, ICFR controls, Security, IT infrastructure, third-parties, IT project management, cybersecurity, data protection, privacy, and IT processes throughout the company. Assists and leads as required in the planning, organizing, and execution of financial, operational, and compliance audits. * Performs and leads the execution of IT audit procedures, including identifying and defining issues, developing criteria, reviewing, and analyzing evidence, and documenting client processes and procedures. May include navigating a variety of servers, data types, and data structures. Also, manipulating large data sets to complete statistical and other analyses. Finally, executes custom analytics for operations, finance, and technology audit activities. * Exhibits the ability to perform walkthroughs and tests of design and effectiveness over ITGC within an organization and assist in the identification and testing of the controls designed to ensure both IA and Management meet their objectives. * Assist business partners and IA management with applying key frameworks including COSO/COBIT and Cybersecurity framework assessment for internal controls, and the development of a risk-based audit approach which focuses on significant business risk exposures, and improvement opportunities. * Assist with the development of presentation materials for periodic reporting to the IA Director and Audit Committee, the audit risk assessment, and the development of the annual IA plan. * Conduct management interviews, review documents, develops, and administers questionnaires, composes summary memos, and prepares detailed working papers in the execution of IT, and other audit activities. * Identifies develops, and documents IT audit issues and recommendations to enhance internal controls, maximize efficiency and minimize exposure to loss and regulatory risk using independent judgment. * Drafts audit comments and report issues to support findings identified during fieldwork. Obtains management agreement, in writing, on control issues and commitment to implement recommendations. * Assists corporate and site personnel with the ongoing design, maintenance and assessment of IT controls, including the creation and maintenance of process walkthroughs and controls documentation. * Perform testing that adheres to specific audit procedures for ITGC, application controls, and key reports, including those that support requirements regarding Sarbanes-Oxley (404) compliance. * Develops and maintains productive client and staff relationships through individual contacts and group meetings. * Provides or assists in providing training, coaching, and guidance to Internal Auditors, GA's, corporate and site personnel; in conducting audits, the use of tools, Sarbanes Oxley, internal controls, and other audit-related issues. * As requested, may represent IA on organizational project teams at management meetings and with external organizations. Stay abreast of current business and industry trends relevant to the business. Demonstrate in-depth technical capabilities and professional knowledge. Demonstrate the ability to assimilate to new knowledge. Job Requirements: * Advanced knowledge of the Standards for the Professional Practice of Internal Auditing and the Code of Ethics developed by the Institute of Internal Auditors. * Awareness of requirements related to internal controls over financial reporting as set forth by the Sarbanes-Oxley Act 2002. * Knowledge of the COSO, COBIT5, or NIST frameworks. * Develop and execute data analysis procedures using Computer Assisted Auditing Techniques (CAATs) including continuous audit activities. Writing SQL inquiries from scratch to support IA activities, and experience with analytic tools such as IDEA, ACL, and Excel. Finally, using CAAT's and tools to draw logical conclusions, prepare written reports, and executive summaries. * Execute ad hoc analyses, code reviews, and data extractions requested by IA team members. * Provide technical support in the assessment, design, and implementation of ITGC requirements. * Apply current knowledge of IT trends and processes, and test the client-related business processes to evaluate, and identify security and risk management issues, as well as other opportunities for overall process improvement. * Execute assigned client engagements from start to completion under the direction of the IT Senior Manager and IT Manager. The engagement includes all phases of the audit process including planning, identifying risks, establishing objectives and scope of work, completing the audit program, performing the audit fieldwork, documentation of work performed, and meeting audit project milestones. * Possess knowledge of and skill in applying internal auditing and Generally Accepted Accounting Principles (GAAP), and practices. * Possess considerable skill in communicating risks to management control and process owners and in maintaining composure under pressure while meeting multiple deadlines. * Possess effective verbal and written communications, including active listening skills and skills in presenting findings, recommendations, and in negotiating issues and audit observations with client personnel. * Possess the ability to collaborate with peers to the successful execution of an audit project. * Possess advanced skills in conducting quality control reviews of audit work products. * Possess knowledge of or at least a familiarity with fraud, forensics, and other detection techniques and concepts. * Possess excellent people and soft skills and be flexible in adapting to fast-changing situations. * Be available to travel up to 25% domestically, including additional limited international travel where visas may be required. Minimum Qualifications: * Bachelor's Degree in Statistics, Data Science, Information Technology Assurance, Management Information Systems, Computer Science, Accounting, or related field. * 2+ years of full-time experience in auditing, Internal Audit accounting, information technology, or business analysis. Preferred Qualifications: * 1+ years of supervisory or project management experience * Advanced degree * Experience in the Energy Industries auditing and accounting functions is highly preferred. * Big 4 Accounting Firm or public company experience a plus. Additional Details: Work is primarily in a climate controlled / office environment with minimal safety / health hazard potential. The employee is regularly required to sit for extended periods of time, stand, or walk with occasional lifting (overhead, waist level) from floor, bending and frequent near vision use for reading and use of computer, telephone, and other office equipment. The job may require some overtime, including weekends or holidays and may also require domestic travel to various Company locations within the continental U.S., South America, and Canada as needed.
|