Sr Auditor - Information Technology

POSITION CONCEPT

The Sr Auditor - IT provides assurance and advisory services designed to evaluate and facilitate improving the effectiveness of risk management, governance, and internal controls at TECO Energy and its subsidiaries, while adding value by demonstrating how to improve effectiveness in business operations. Helps achieve this mission through end-to-end execution of department engagements and activities, focusing primarily on those with a heavy information systems component (security risk assessments, ITGC reviews, system implementations, etc.). Works closely with other team members, internal clients, and external service providers (auditors, consultants, etc.) to better understand risk and carry out engagements. Provides technical assistance and guidance and training.

PRIMARY DUTIES AND RESPONSIBILITIES

• Execute internal auditing and consulting engagements of technological, financial, and operational areas, with a focus on information systems, as part of the annual engagement plan:
  
  
  
  1. Research engagement and activity topics
  2. Analyze systems, processes, and controls
  3. Perform document procedures
  4. Communicate results
  5. Develop scope, objectives, and procedures
  6. Administer budget and schedule
  7. Follow Up
  8. Review work of others and assign work to others
  
  
  
  
• Provide technical guidance and training
• Collaborate with external auditors
• Perform other miscellaneous activities (community service events, draft financial statement review, etc.)

QUALIFICATIONS

Education

• Required: Bachelor's degree with a major in a technology or business discipline (e.g., MIS, accounting), issued by a regionally accredited institution (SACS, etc.), is required.
• Preferred:Master's degree with a concentration in a technology or business discipline (e.g., MS, MBA), issued by a regionally accredited institution (SACS, etc.), is preferred.

Licenses/Certifications

• Preferred:Multiple certifications demonstrating a breadth of knowledge over internal audit, business, technology, or project management are preferred (e.g. CISA, CIA, CPA, PMP).

Experience

• Required:3 years of direct or related work experience consisting of public accounting, internal audit, or Information Technology related experience.
• Preferred:Experience in information systems risk advisory or system implementations.

Knowledge/Skills/Abilities (KSA)

Required:

• Working knowledge of basic information system components, including: networks, operating systems, databases, and applications, and related risks
• Working knowledge of fundamental accounting and financial transaction principles
• Working knowledge of internal control frameworks (e.g., COSO) and IT operations control frameworks (e.g., CobiT)
• Working knowledge of ITGC auditing approaches and methods
• Working knowledge of SDLC concepts and risks
• Excellent oral and written communication skills
• Excellent investigative, problem solving, and analytical skills
• Ability to assess emerging information technology and business risks
• Ability to leverage computer-assisted auditing techniques for data analysis;
• Ability to work well independently
• Excellent time management skills and the ability to multi-task and work on multiple engagements simultaneously
• Ability to lead an engagement team
• Ability to provide direction and delegate work to other team members
• Ability to model procedures, processes, and systems

Preferred:

• Working knowledge of project management best practices
• Working knowledge of financial auditing concepts, techniques, generally accepted accounting principles (GAAP) and general accepted auditing standards (GAAS)
• Working knowledge of IIA standards
• Working knowledge of utility industry technology compliance requirements (e.g., NERC CIP)
• Working knowledge of the following systems and technologies:
  
  
  
  • SAP ERP (FI/CO, SC, HCM), BW, BPC, GRC, HANA
  • ACL
  • Customer Relationship Management Systems (CRM)
  • Energy Trading and Risk Management Systems (ETRM)
  • Infrastructure virtualization
  • Industrial Control Systems (e.g., SCADA, DCS)
  • Ability to use scripting and query languages (e.g., VBA, SQL)
  
  
  
  

LEADERSHIP COMPETENCIES

• Speaks up on Safety, Health and the Environment
• Takes Ownership and Acts with Integrity
• Drives Operational Excellence for Customers
• Builds Strong, Collaborative Relationships
• Develops People and Teams
• Cultivates Innovation and Embraces Change
• Thinks Strategically and Exercises Sound Judgment