Senior IT auditor at Clark Davis Associates Morristown, NJ

Sunseeker Property Service; Morristown (NJ); On-site; USD 65,000 - 95,000; Full time

Job summary

Sunseeker Property Service seeks a Senior IT Auditor in Morristown, NJ to conduct SOX IT testing for operating units and advise on internal controls. You will formulate recommendations and track action items to ensure timely closure, covering IT general controls, information security, and data analysis.

The role requires 3+ years in IT audit/IT SOX, strong IAM and security skills, and familiarity with PCI/ISO COBIT standards. Fortune 500 financial services experience is a plus.

Qualifications

• BA/BS degree in MIS, Computer Science or related field.
• 3+ years of IT audit, information security or IT SOX experience.
• Strong IAM concepts across multi-layer networks, systems and apps.
• Hands-on with OS and infra tech: UNIX/Linux, Windows, networks security devices.
• Familiar with PCI, ISO/IEC 27000, COBIT and ITIL standards.
• Security/audit certifications (CISA, CISSP, CISM) a plus.

Responsibilities

• Perform SOX IT testing for the Company’s operating units.
• Recommend improvements to internal control processes and work programs.
• Follow up on action items to ensure timely closure.
• Support IT general controls, information security audits and data extraction.
• Collaborate with business IT management and internal auditors.

Skills

Information Security

IT audit

IT SOX Compliance

Identity & Access Management

Network security

Databases & OS

Education

BA/BS in MIS or CS

Tools

CIS Benchmarking Tool

Rapid7

Symantec CCS

NetBackups

Job description

Company Description

Our client who is a Fortune 500 Financial Services Company is looking for talented Senior IT auditors.

Job Description

• Auditing
  • Perform SOX IT testing for the Company’s operating units.
  • Formulate recommendations to improve internal control processes, work programs and other SOX compliance efforts, as appropriate.
  • Follow up on outstanding action points within an agreed timetable and ensure that all issues are closed in a timely fashion.
  • Scope of audits may include any of the following:
    • IT general controls –testing of change management, security administration, computer operations, physical security, and other relevant IT general controls
    • Information Security – execution of audits to ensure compliance with Information Security standards
    • Financial Audit Assistance – support financial and operational internal auditors by extracting and analyzing data from financial systems using software tools such as IDEA.
• Business Unit Assistance
  • Provide advisory services to business units relative to the design of application controls and security related controls for system implementations with a view to building in internal controls that are commensurate with the size and complexity of the operations.
  • Work on special technology-related projects for business units, as requested.
• Communication
  • Participation in internal planning meetings and regular communications within the Internal Audit Department.
  • Regular contact with the VP and SVP of Internal Audit and communication of plans and activities.
  • Regular contact with business unit IT management and maintenance of knowledge of business unit plans and strategies.

Qualifications

• BA/BS degree in Management Information Systems, Computer Science, or related field
• 3+ years of working experience in Information Security, IT audit and/or IT SOX Compliance
• Solid operational understanding of Identity and Access Management technologies and methodologies across multilayer and multi-technology networks, system, application and databases.
• Operational knowledge of infrastructure technologies and diverse operating systems (e.g., Virtualization, z/OS, z/VSE, UNIX/Linux and Windows platforms), Network security devices (e.g.,firewalls, intrusion detection and prevention systems, proxies, network taps), and relational databases (e.g., Oracle, Microsoft SQL, AS400, DB2, IBM Mainframe)
• Understanding of Information Security industry auditing tools (e.g., CIS Benchmarking Tool, Rapid 7, Symantec Control Compliance Suite CCS)
• Solid understanding of Backup and Recovery best practices and methodologies as well as the industry technologies utilized (e.g.,NetBackups)
• Conceptual understanding of PCI, ISO/IEC 27000 series, ITIL and COBIT standards, European data protection, IT infrastructure and processes, IT governance, project management, principles of internal controls
• Ability to independently evaluate controls over security processes, infrastructure, network, applications and databases according to established timetables and requirements
• Security and Audit certifications (e.g., CIPP, CISSP, CISM, or CISA) are desirable

Additional Information

65-95k plus bonus

Summary

Function: Accounting/Auditing

Experience level: Mid-Senior Level

Industry: Financial Services