Senior IT Internal Auditor

Socket.dev; United States; On-site; USD 80,000 - 115,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Paid time off

Professional development

Job summary

Cleveland-Cliffs Inc. in Cleveland, OH, seeks a Senior IT Internal Auditor to audit IT controls, assess risk, and strengthen processes across IT, business, and finance functions.

The role covers SOX IT controls and non-SOX audits in cyber security, data governance, and cloud security, with up to 30% travel. The company offers competitive pay, health insurance, retirement benefits, and paid time off.

Qualifications

• Bachelor's degree in IT/IS/Business Admin or related field.
• 3+ years of related IT audit experience.
• Ability to work in a complex environment with general direction.
• Pragmatic problem-solving to reconcile conflicting priorities.
• High ethics, integrity, and objectivity.
• Travel up to 30% to Cleveland locations.

Responsibilities

• Participate in annual SOX risk assessment mapping IT assets to financial processes and controls.
• Design and execute tests of IT General Controls within SOX scope.
• Provide leadership for junior team members.
• Evaluate control effectiveness and document information to support audit results.
• Identify improvements to ensure proper IT controls and protect company assets.
• Assess deficiencies against industry best practices and monitor action plans.
• Coordinate special requests, projects, and reports with Internal Audit Management.
• Maintain confidentiality of audit findings and company information.
• Build relationships with Internal Audit stakeholders.
• Follow IIA Standards and Code of Ethics; participate in department improvements.
• Support initiatives like sustainability and enterprise risk management.
• Design and execute non-SOX IT audits in cyber security, data governance, and cloud security.
• Assess risks related to AI, ML, automation, and analytics; evaluate governance and data management.

Skills

IT audit

SOX compliance

Risk assessment

Leadership

Communication

Ethics

Travel up to 30%

Education

Bachelor's degree in Information Technology/IS/Business Admin

Job description

Location: Cleveland, OH

Cleveland-Cliffs is seeking a Senior IT Internal Auditor for our corporate headquarters located in Cleveland, OH. This role executes IT audits whose results help the business manage strategic risks, improve or develop efficient and effective processes, identify and communicate best practices, and foster appropriate control levels for IT, business, and financial risks.

Summary of Responsibilities

• Participate in the annual SOX risk assessment, mapping IT assets and technologies to key financial processes and controls.
• Support the design and execution of tests of controls, including reviewing other team members' testing, to evaluate the operating effectiveness of IT General Controls within SOX scope.
• Foster a team-oriented environment and provide leadership for junior team members.
• Evaluate and document process, system, and control effectiveness by applying information technology, auditing, and business knowledge; collect, analyze, and document information to support audit results.
• Partner with management to identify constructive, value-added solutions to address identified issues. Recommend operational improvements that ensure that proper controls are exercised over all aspects of the information systems and that company assets are conserved, protected, and accurately presented.
• Assess the overall significance of the control deficiencies identified during the audit. Provide perspective for evaluating the audit deficiencies against evolving industry best practices.
• Monitor status of action plans arising from audits.
• Coordinate/complete special requests, projects, and reports as directed by Internal Audit Management.
• Maintain the confidentiality of audit findings and Company proprietary information.
• Develop and maintain effective working relationships with Internal Audit’s stakeholders.
• Conduct work in accordance with the Standards for the Professional Practice of Internal Auditing and Code of Ethics promulgated by the Institute of Internal Auditors.
• Participate in the continuous improvement of the Internal Audit Department, including providing training and feedback related to audit activities.
• Support company-wide initiatives, such as sustainability practices, enterprise risk management programs, and other projects at the Company.
• Design and execute non-SOX IT audits in areas of cyber security, data governance, and cloud security, amongst others.
• Assess risks and controls related to emerging technologies, including artificial intelligence (AI), machine learning, automation, and advanced analytics. Evaluate governance processes, data management practices, and compliance with Company policies regarding AI usage.

Minimum Qualifications

• Bachelor's in Information Technology, Information Systems, Business Administration, or related field.
• 3+ years of related experience
• Ability to work in a highly complex environment under general direction as to assignment
• Ability to solve conflicts between differing priorities of various process stakeholders by offering pragmatic solutions to management
• Ability to maintain the highest level of ethics, integrity, and objectivity
• Ability to travel up to 30% to Cleveland-Cliffs locations as required

Preferred Qualifications

• 5+ years of experience in IT audit, internal audit, public accounting, cybersecurity, IT risk management, or related disciplines.
• Excellent written and oral communication skills, strong organizational and analytical skills, and project management experience
• Comprehensive knowledge of the Sarbanes-Oxley Act provisions and methodologies for achieving compliance
• Understanding of both Control Objectives for Information and Related Technology (COBIT) and general auditing (GAAS) principles
• Strong interpersonal skills – ability to work closely with people at all levels of the organization
• Proactive – demonstrated ability and desire to improve individual performance and advance the efficiency and effectiveness of the department
• Understanding of emerging technology risks, including artificial intelligence (AI), machine learning, automation, and data governance concepts, with the ability to assess related risks and controls.
• Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), or equivalent certification preferred.
• Standing membership in the Information Systems Audit and Control Association (ISACA) is preferred.
• Experience utilizing data analytics, automation, robotic process automation (RPA), AI-enabled audit tools, and continuous auditing techniques is preferred.

The salary range for this role is $80,000-$115,000. An employee’s pay within the salary range will be based on numerous factors, including, but not limited to, relevant education, qualifications, experience, skills, geographic location, and business or organizational needs.

Cleveland-Cliffs Inc. is the largest flat-rolled steel company and the largest iron ore pellet producer in North America. The Company is vertically integrated from mined raw materials, direct reduced iron, and ferrous scrap to primary steelmaking and downstream finishing, stamping, tooling, and tubing. We offer an excellent total compensation package including competitive pay with variable compensation opportunity, health insurance, retirement, paid time off, and more.

Cleveland-Cliffs Inc. is committed to working with and providing reasonable accommodation to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the employment process, please send an e-mail to [e-mail] or call 1-[phone] and let us know the nature of your request and your contact information. Do not email your application materials to this email address. Application materials sent to this email address will not be considered.

Cleveland-Cliffs Inc. is an equal opportunity employer – M/F/Veteran/Disability. We are a drug-free workplace and conduct pre-employment screening as a condition of employment.