IT General Controls - IT Auditor

Prodware Solutions; New Brunswick (NJ); On-site; USD 110,000 - 160,000; Full time

Job summary

Prodware Solutions is seeking an ITGC Audit Lead to drive IT and information system security audits and advisory projects. You will lead audit staff, develop risk-based IT audit plans, and ensure SOX 404 compliance across ERP environments.

The role requires strong communication with IT and business leadership, and the ability to stay current with IT trends and controls. Experience with SAP, S/4HANA, and SAP GRC is highly valued.

Qualifications

• Bachelor's degree in an IT or related discipline; Master’s preferred.
• CISA/CISSP/CPA/CIA or equivalent are a plus.
• 7+ years in IT audit, development, internal audit, or related fields.
• 4+ years leading audit staff and managing audit plans.

Responsibilities

• Lead audit staff and manage IT and information system security audits.
• Develop annual IT audit plans based on risk and leadership input.
• Perform pre/post-implementation audits of ERP systems and IT initiatives.
• Evaluate design and operation of IT controls for SOX compliance.
• Coordinate with management, external auditors, and partners to drive risk mitigation and process improvements.
• Advise on IT initiatives (security, DR/BCP) and control enhancements.

Skills

Leadership

IT Audit

Sarbanes-Oxley

IT Security

SAP

S/4HANA

SAP GRC

Risk Management

Communication

Education

Bachelor's degree

Master's degree

Tools

SAP

COBIT

NIST

Job description

ITGC Audit Lead The Audit Lead position will be required to lead audit staff and manage the execution of IT and information system security audits along with leading operational assurance and advisory projects.

Successful IT Audit Manager candidates must be able to lead the completion of technical IT audits that support financial or business operations including Sarbanes-Oxley 404 requirements.

The IT Audit Manager must be able to effectively interact with IT and business leadership to drive risk mitigation and to stay abreast IT operational changes and emerging technologies.

This position will be required to work with IT on key IT initiatives and priorities including Enterprise Risk Management. Proficient in SAP, S4 HANA, SAP GRC.

Responsibilities

• Managing a team of auditors performing both IT audit and other advisory and assurance projects
• Building a team of talented IT auditors through coaching and development activities
• Developing annual IT audit plan of high risk / importance projects based on independent research and knowledge, interactions with Company leadership and peer benchmarking
• Performing pre- and post-implementation audits of new system implementations, expanding ERP footprint, application re-writes, etc.
• Auditing key system functionality and systematic controls
• Working together with management to assist in identifying opportunities to enhance efficiencies and effectiveness of processes and strengthen controls
• Liaising with IT management to provide ongoing advisory support for system implementations and key IT initiatives (IT security, BCDR, etc.)
• Evaluating the design and execution of the IT general and application controls for SarbanesOxley compliance
• Establishing and maintaining effective relationships with management, external auditors, and other partners to further develop Company knowledge and auditing skills

Requirements

• Bachelor's Degree, preferably in Management Information Systems, Accounting Information Systems, Computer Science or other IT related discipline. Master’s Degree preferred
• CISA, CISSP, CPA or CIA a plus
• Minimum of seven years of experience in IT audit, IT development, internal audit, public accounting, finance, and/or information systems
• Minimum of four years of experience in leading audit staff and managing execution of the audit plan
• Strong human relations, analytical, and oral and written communications skills
• Understanding of key IT processes such as Disaster Recovery, IT Security, Software Licensing, Third Party Hosted Services, etc
• Knowledge of internal audit principles (IIA Standards, and COSO) and IT control frameworks (COBIT, NIST, SANS, and ISO)
• Familiarity with the following technical areas/platforms beneficial:
• Experience in conducting risk assessments and facilitating enterprise risk management a plus
• Experience developing and leading a data analytics program a plus.