Senior IT Auditor

Global Industrial Company; Port Washington, Northern (NY, KY); Hybrid; USD 85,000 - 115,000; Full time

Job summary

Global Industrial Company in the United States is seeking an IT auditor/IT security professional with 2–5 years of experience to join our audit team. You will plan IT audits, document IT processes, test controls, and lead fieldwork under the VP of IA, applying strong knowledge of SOX and IT risk management.

You should have a degree in a related field and desirable certifications such as CISA/CISSP. ERP security experience and the ability to communicate findings clearly are essential for success.

Qualifications

• Two to five years' experience as IT auditor or IT security professional in public accounting, professional services or industry.
• Degree in business, accounting, finance, computer science, information systems, engineering, or related discipline.
• Strong understanding of SOX controls.
• PCI DSS experience preferred.
• Strong understanding of IT processes, risks, and controls.
• Strong presentation abilities and report writing skills.
• Solid IT project management, teamwork, and relationship skills.
• CISA or CISSP certification is highly desirable.
• Audit/risk experience in a $1B+ business.
• Proficiency with ERP controls and security in at least one major ERP package.
• Knowledge of COBIT and Sarbanes-Oxley, CRISC, CGEIT, GIAC, CEH, CCNA, MCSE and other certifications are a plus.
• Knowledge of vulnerability assessment, network, security and database IT auditing tools is highly preferred.
• Knowledge of networking technologies (e.g., Firewalls, Routers, Switches, Wireless, VLAN, IPS/IDS).
• Knowledge of UNIX/Linux OS security and Windows OS/AD security.

Responsibilities

• Plan IT audits and develop work programs, timelines, risk assessments and other planning documents.
• Document IT processes and identify and test controls with IT leadership.
• Lead IT fieldwork and report audit status and issues to VP of IA.
• Demonstrate and apply thorough understanding of complex information systems and IT environments.
• Identify potential audit issues and communicate findings to management in writing and verbally.
• Maintain commitment to personal development and keep up with technology trends and regulations.
• Collaborate with audit teammates and use current tools to enhance deliverables.

Skills

IT audit

SOX controls

IT security

Verbal communication

Report writing

Project management

ERP controls

COBIT/IT governance

CACISA/CISSP desirable

Audit/risk experience

Education

Bachelor degree in business, accounting, finance, CS, IS, engineering or related

Tools

ERP systems

Security testing tools

Job description

Select how often (in days) to receive an alert:

Global Industrial Company (NYSE: GIC) is a leading distributor of high-quality, industrial-strength equipment and supplies, serving organizations of all sizes across a wide range of industries. With more than 75 years of experience, customers rely on us for our broad portfolio of national and private brands, trusted service, and strong value proposition.

We help customers keep their operations running by delivering the right products when they need them—becauseWe Can Supply That™.

Why Join Global Industrial

At Global Industrial, we’reOne Teamcommitted todelivering valueand empowering our associates to grow. Our culture is built on:

• Meritocracy & Pay for Performance– Your impact drives your rewards
• High Say-Do Ratio– We follow through on our commitments
• Career Growth & Internal Mobility– We invest in your future
• Collaboration & Accountability– One team delivering real results

Make an impact. Be recognized. Grow your career with us.
Global Industrial — Delivering Value Starts Here

• Moving the SOX and Integrated Audit Support section toward the beginning to emphasize its importance;
• Expanding the responsibilities to clearly include the execution and documentation of SQX IT control testing
• Adding hands-on SOX IT audit experience as a mandatory qualification
• Working with the VP of IA to plan IT audits and develop work programs, timelines, risk assessments, and other planning documents
• Working with IT leadership to document the IT processes and identify and test controls
• Serving as a fieldwork leader by directing daily progress of IT fieldwork, informing the VP of IA of audit status and issues
• Demonstrating and apply a thorough understanding of complex information systems
• Using knowledge of the current IT environment and IT risks, identifying potential audit issues and communicating this information to management through written correspondence and verbal presentations
• Maintaining a continuing commitment to personal development, including an understanding of technology trends as well as statutory and legislative changes impacting IT
• Demonstrating and applying strong project management skills, collaborate with other audit team members and use current technology and tools to enhance the effectiveness of deliverables

Competencies and skills

• Two to five years' experience working as an IT auditor or IT security professional for a public accounting firm, professional services firm or within industry
• A degree in business, accounting, finance, computer science, information systems, engineering, or a related discipline
• Strong understanding of SOX controls
• PCI DSS experience preferred
• Strong understanding of IT processes, risks, and controls
• Strong presentation abilities underpinned by effective verbal communication and report writing skills
• Solid IT project management, teamwork and relationship skills
• CISA or CISSP certification is highly desirable
• Audit / risk experience in a $1B+ business
• Proficiency with ERP controls and security in at least one major ERP package
• Knowledge of COBIT and Sarbanes-Oxley,CRISC, CGEIT, GIAC, CEH, CCNA, MCSE and other certifications are a plus
• Knowledge of vulnerability assessment, network, security and database and IT auditing tools is highly preferred
• Knowledge of networking technologies (e.g. Firewalls, Routers, Switches, Wireless, VLAN, IPS/IDS)
• Knowledge of UNIX / Linux OS security
• Knowledge of Windows OS and Active Directory security

EEO/AA Statement

Global Industrial provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.