Senior IT Auditor

Global Industrial Company; New York (NY); On-site; USD 110,000 - 150,000; Full time

Job summary

Global Industrial Company, a leading distributor of industrial equipment and supplies, seeks an IT Auditor/IT Security professional in New York to support internal audit. You will plan IT audits, assess controls, and work with IT leadership to strengthen risk management.

Candidates should have 2–5 years of IT audit or IT security experience, a related degree, and certifications such as CISA or CISSP are highly desirable. Strong communication and project management skills are essential.

Qualifications

• Two to five years' experience as IT auditor or IT security professional.
• Degree in business, accounting, finance, CS, information systems, or engineering.
• Strong understanding of SOX controls and IT processes

Responsibilities

• Plan IT audits with the VP of IA and develop work programs, timelines, and risk assessments.
• Document IT processes, identify and test controls, and coordinate with IT leadership.
• Direct daily fieldwork progress and report audit status and issues to management.
• Apply knowledge of current IT environments and risks to communicate findings clearly.

Skills

SOX controls

IT audit

IT security

Project management

Verbal communication

Report writing

Risk assessment

Teamwork

Attention to detail

Education

Bachelor's degree in business, accounting, finance, CS, information systems, or engineering

Tools

ERP packages

COBIT framework

IT auditing tools

Job description

Global Industrial Company (NYSE: GIC) is a leading distributor of high-quality, industrial-strength equipment and supplies, serving organizations of all sizes across a wide range of industries. With more than 75 years of experience, customers rely on us for our broad portfolio of national and private brands, trusted service, and strong value proposition.

We help customers keep their operations running by delivering the right products when they need them—because We Can Supply That™.

Why Join Global Industrial

At Global Industrial, we’re One Team committed to delivering value and empowering our associates to grow. Our culture is built on:

• Meritocracy & Pay for Performance – Your impact drives your rewards
• High Say-Do Ratio – We follow through on our commitments
• Career Growth & Internal Mobility – We invest in your future
• Collaboration & Accountability – One team delivering real results

Make an impact. Be recognized. Grow your career with us.

Global Industrial — Delivering Value Starts Here

Key Responsibilities

• Moving the SOX and Integrated Audit Support section toward the beginning to emphasize its importance;
• Expanding the responsibilities to clearly include the execution and documentation of SQX IT control testing
• Adding hands-on SOX IT audit experience as a mandatory qualification
• Working with the VP of IA to plan IT audits and develop work programs, timelines, risk assessments, and other planning documents
• Working with IT leadership to document the IT processes and identify and test controls
• Serving as a fieldwork leader by directing daily progress of IT fieldwork, informing the VP of IA of audit status and issues
• Demonstrating and apply a thorough understanding of complex information systems
• Using knowledge of the current IT environment and IT risks, identifying potential audit issues and communicating this information to management through written correspondence and verbal presentations
• Maintaining a continuing commitment to personal development, including an understanding of technology trends as well as statutory and legislative changes impacting IT
• Demonstrating and applying strong project management skills, collaborate with other audit team members and use current technology and tools to enhance the effectiveness of deliverables

Competencies and skills

• Two to five years' experience working as an IT auditor or IT security professional for a public accounting firm, professional services firm or within industry
• A degree in business, accounting, finance, computer science, information systems, engineering, or a related discipline
• Strong understanding of SOX controls
• PCI DSS experience preferred
• Strong understanding of IT processes, risks, and controls
• Strong presentation abilities underpinned by effective verbal communication and report writing skills
• Solid IT project management, teamwork and relationship skills
• CISA or CISSP certification is highly desirable
• Audit / risk experience in a $1B+ business
• Proficiency with ERP controls and security in at least one major ERP package
• Knowledge of COBIT and Sarbanes- Oxley, CRISC, CGEIT, GIAC, CEH, CCNA, MCSE and other certifications are a plus
• Knowledge of vulnerability assessment, network, security and database and IT auditing tools is highly preferred
• Knowledge of networking technologies (e.g. Firewalls, Routers, Switches, Wireless, VLAN, IPS/IDS)
• Knowledge of UNIX / Linux OS security
• Knowledge of Windows OS and Active Directory security

EEO/AA Statement

Global Industrial provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.