Job Description:

● Planning audits, including obtaining background information on the function

being audited, researching the best practices, performing a risk and control

assessment, defining the audit scope, objectives and developing work programs.

● Managing the audit fieldwork, including documenting work papers, advising

management of gaps identified throughout the audit, and working with

management to identify solutions to control gaps.

● Writing clear and concise audit reports to executive management to gain

commitment to the action plans which mitigate control gaps or ineffective

controls, maintaining effective relationships with process owners and second

line of defense. Performing timely follow up work to ensure action plans are

implemented minimizes the risks.

● Proactive in researching best practices and evolving technologies to apply as

appropriate. Develop and maintain skills necessary to understand and respond

to business needs. Able to grasp new concepts quickly.

General Skills:

● Self-starter who excels at working with little supervision.

● Work is performed independently requiring judgment and discretion, able to

multi-task and prioritize workload.

● Strong verbal and written communication skills, including report development,

management reporting to senior leadership, and reporting to the audit

leadership team.

● Strong analytical and organizational skills. Positive attitude, proactive and

resourceful.

● Knowledge of one or more IT governance and security standards such as NIST,

ISO27001, COBIT, ITIL, GDPR, CMMC and PCI.

● Evaluate the adequacy and effectiveness of IT General Controls and IT

application controls in accordance with SOX 404 requirements.

● Ability to plan and execute risk-based audits in IT applications, infrastructure,

cyber security (e.g., vulnerability management, web security, end-point

protection, security event monitoring), cloud infrastructure, and applications.

The Successful Applicant:



● Bachelor’s degree in Computer Science, Computer Information Systems, or

equivalent from which comparable knowledge and job skills can be obtained.

● One or more professional certifications such as CISA, CISM, CRISC, CIA is

mandatory.

● Cyber security or cloud technology-related certifications such as CISSP, CEH,

CCSK, Azure Fundamentals is a plus.

● Must have 6 to 8 years of relevant experience.