Senior IT Auditor: SOX & IT Controls Lead

Global Industrial Company; Port Washington, Northern (NY, KY); Hybrid; USD 85,000 - 115,000; Full time

Job summary

Global Industrial Company in the United States is seeking an IT auditor/IT security professional with 2–5 years of experience to join our audit team. You will plan IT audits, document IT processes, test controls, and lead fieldwork under the VP of IA, applying strong knowledge of SOX and IT risk management.

You should have a degree in a related field and desirable certifications such as CISA/CISSP. ERP security experience and the ability to communicate findings clearly are essential for success.

Qualifications

• Two to five years' experience as IT auditor or IT security professional in public accounting, professional services or industry.
• Degree in business, accounting, finance, computer science, information systems, engineering, or related discipline.
• Strong understanding of SOX controls.
• PCI DSS experience preferred.
• Strong understanding of IT processes, risks, and controls.
• Strong presentation abilities and report writing skills.
• Solid IT project management, teamwork, and relationship skills.
• CISA or CISSP certification is highly desirable.
• Audit/risk experience in a $1B+ business.
• Proficiency with ERP controls and security in at least one major ERP package.
• Knowledge of COBIT and Sarbanes-Oxley, CRISC, CGEIT, GIAC, CEH, CCNA, MCSE and other certifications are a plus.
• Knowledge of vulnerability assessment, network, security and database IT auditing tools is highly preferred.
• Knowledge of networking technologies (e.g., Firewalls, Routers, Switches, Wireless, VLAN, IPS/IDS).
• Knowledge of UNIX/Linux OS security and Windows OS/AD security.

Responsibilities

• Plan IT audits and develop work programs, timelines, risk assessments and other planning documents.
• Document IT processes and identify and test controls with IT leadership.
• Lead IT fieldwork and report audit status and issues to VP of IA.
• Demonstrate and apply thorough understanding of complex information systems and IT environments.
• Identify potential audit issues and communicate findings to management in writing and verbally.
• Maintain commitment to personal development and keep up with technology trends and regulations.
• Collaborate with audit teammates and use current tools to enhance deliverables.

Skills

IT audit

SOX controls

IT security

Verbal communication

Report writing

Project management

ERP controls

COBIT/IT governance

CACISA/CISSP desirable

Audit/risk experience

Education

Bachelor degree in business, accounting, finance, CS, IS, engineering or related

Tools

ERP systems

Security testing tools

Job description

Global Industrial Company in the United States is seeking an IT auditor/IT security professional with 2–5 years of experience to join our audit team. You will plan IT audits, document IT processes, test controls, and lead fieldwork under the VP of IA, applying strong knowledge of SOX and IT risk management.

You should have a degree in a related field and desirable certifications such as CISA/CISSP. ERP security experience and the ability to communicate findings clearly are essential for success.