Senior IT Auditor

Global Industrial; Roslyn Heights (NY); On-site; USD 110,000 - 150,000; Full time

Job summary

Global Industrial is seeking an IT auditor/IT security professional with 2–5 years of experience to join our Internal Audit function in the United States. You will execute IT control testing, document processes, and plan IT audits with the VP of Internal Audit.

You will lead IT fieldwork, assess IT risks, and communicate findings clearly in writing and presentations. Strong ERP/COBIT knowledge and SOX controls experience are required.

Qualifications

• Two to five years' experience as an IT auditor or IT security professional.
• Strong understanding of SOX controls.
• Demonstrated ability to document IT processes and controls.
• Excellent written and oral communication skills.

Responsibilities

• Execute and document IT control testing as part of SOX/IT audits.
• Plan IT audits with the VP of Internal Audit and develop work programs.
• Lead IT fieldwork and report progress and issues to management.
• Identify IT risks and communicate findings through written and oral channels.
• Maintain knowledge of technology trends and regulatory changes impacting IT.

Skills

IT auditing

IT security

Verbal communication

Report writing

Project management

Teamwork

CISA or CISSP certification

ERP controls knowledge

COBIT familiarity

Education

Bachelor's degree in business, accounting, finance, CS, IS, or engineering

Tools

ERP controls proficiency

COBIT knowledge

Job description

Global Industrial

Corporate Overview

About Global Industrial

Global Industrial Company (NYSE: GIC) is a leading distributor of high-quality, industrial-strength equipment and supplies, serving organizations of all sizes across a wide range of industries. With more than 75 years of experience, customers rely on us for our broad portfolio of national and private brands, trusted service, and strong value proposition.

We help customers keep their operations running by delivering the right products when they need them-becauseWe Can Supply That.

Why Join Global Industrial

At Global Industrial, we'reOne Teamcommitted todelivering valueand empowering our associates to grow. Our culture is built on:

• Meritocracy & Pay for Performance- Your impact drives your rewards
• High Say-Do Ratio- We follow through on our commitments
• Career Growth & Internal Mobility- We invest in your future
• Collaboration & Accountability- One team delivering real results

Make an impact. Be recognized. Grow your career with us.
Global Industrial - Delivering Value Starts Here

Key Responsibilities

• Moving the SOX and Integrated Audit Support section toward the beginning to emphasize its importance;
• Expanding the responsibilities to clearly include the execution and documentation of SQX IT control testing
• Adding hands‑on SOX IT audit experience as a mandatory qualification
• Working with the VP of IA to plan IT audits and develop work programs, timelines, risk assessments, and other planning documents
• Working with IT leadership to document the IT processes and identify and test controls
• Serving as a fieldwork leader by directing daily progress of IT fieldwork, informing the VP of IA of audit status and issues
• Demonstrating and apply a thorough understanding of complex information systems
• Using knowledge of the current IT environment and IT risks, identifying potential audit issues and communicating this information to management through written correspondence and verbal presentations
• Maintaining a continuing commitment to personal development, including an understanding of technology trends as well as statutory and legislative changes impacting IT
• Demonstrating and applying strong project management skills, collaborate with other audit team members and use current technology and tools to enhance the effectiveness of deliverables

Competencies and skills

• Two to five years' experience working as an IT auditor or IT security professional for a public accounting firm, professional services firm or within industry
• A degree in business, accounting, finance, computer science, information systems, engineering, or a related discipline
• Strong understanding of SOX controls
• PCI DSS experience preferred
• Strong understanding of IT processes, risks, and controls
• Strong presentation abilities underpinned by effective verbal communication and report writing skills
• Solid IT project management, teamwork and relationship skills
• Desirable Additional Skills:
• CISA or CISSP certification is highly desirable
• Audit / risk experience in a $1B+ business
• Proficiency with ERP controls and security in at least one major ERP package
• Knowledge of COBIT and Sarbanes-Oxley,CRISC, CGEIT, GIAC, CEH, CCNA, MCSE and other certifications are a plus
• Knowledge of vulnerability assessment, network, security and database and IT auditing tools is highly preferred
• Knowledge of networking technologies (e.g. Firewalls, Routers, Switches, Wireless, VLAN, IPS/IDS)
• Knowledge of UNIX / Linux OS security
• Knowledge of Windows OS and Active Directory security

EEO/AA Statement

Global Industrial provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.