Technology & Security Risk Auditor

Global Payments; Alpharetta (GA); On-site; USD 70,000 - 110,000; Full time

Job summary

Global Payments seeks an Internal Audit professional to perform risk-based IT and security audits across cloud and on-prem environments. The role emphasizes controls testing, risk assessment, planning, fieldwork, data analysis, and remediation validation with collaboration across global teams.

The ideal candidate will have a solid understanding of information security controls, major frameworks, and experience in payment processing.

Qualifications

• Bachelor’s degree in Auditing, Business Management, or Information Technology.
• Experience in merchant acquiring / payment processing is preferred.
• Familiarity with control frameworks (COBIT, FFIEC, PCI DSS, ISO27001, ITIL).

Responsibilities

• Support controls testing for risk-based audits across IT and information security.
• Perform risk assessments, planning, fieldwork, data analysis and remediation validation.
• Evaluate technology risks in cloud environments (AWS, Azure, GCP) and on-premise setups.
• Document work papers to high quality standards and communicate findings clearly.

Skills

Audit principles

Risk management

Project management

Communication skills

Security concepts

Cloud experience

Troubleshooting

Education

Bachelor’s degree in Auditing, Business Management, or IT

Tools

COBIT

FFIEC

PCI DSS

ISO27001

ITIL

Job description

Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services. Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results. We are driven by our passion for success and we are proud to deliver best-in-class payment technology and software solutions. Join our dynamic team and make your mark on the payments technology landscape of tomorrow. Ready to take your career global? Make your mark at one of the biggest names in payments.

We are seeking a candidate for a Fortune 500 payments technology company, Global Payment’s management recognizes the importance of managing and responding to risk. Internal Audit is an integral and valued component of Global Payments’ risk management environment. It works closely with management to deliver value-added and challenging audit projects in the areas of information technology, information security, business operations, finance & accounting, and compliance using progressive audit procedures. Our philosophy is to evaluate complex business processes utilizing a risk-based approach and to provide the greatest value to our internal clients. We strive to apply tailored and progressive audit procedures and to avoid standard check-the-box auditing. The department is consistently recognized for its contributions to organizational improvements due to its diverse, energetic, and collaborative approach when working with management.

This role will deliver a diverse array of information technology and information security audits that include in-depth analysis and understanding of supporting business processes. This position will have the opportunity to evaluate numerous technology platforms and apply process, technology, and security risk considerations. Specifically, the role will have the opportunity to evaluate technology risks and controls within major cloud technology provider environments (e.g., Amazon AWS, Google GCP, and Microsoft Azure) as the company continues cloud technology strategic initiatives. The candidate should have experience with a wide array of technology processes, such as infrastructure design and management, information security operations, service management, software development lifecycle, disaster recovery planning, etc.

This position provides the opportunity for future career advancement as well as exposure to senior leadership and organizational divisions across the globe. The Internal Audit team focuses heavily on risk-based audits that help management identify and reduce organizational risk. These projects vary each year and provide a high degree of challenge and diversity. The team also performs internal advisory projects and supports compliance audit responsibilities. Familiarity with the payment processing industry and common technology control frameworks, including COBIT, NIST Cybersecurity, ISO 27000 series, PCI-DSS, and FFIEC IT Handbook is also preferred.

What you’ll own

Support controls testing for risk-based audits and supports the project team with all aspects of the audit lifecycle, including risk assessment, planning, client coordination, fieldwork, data analysis, work paper documentation, reporting, and remediation validation, with direction from senior team members. Willingness to learn and grow technical knowledge through team collaboration. Projects will include a strong focus on information technology and information security controls in executing integrated, risk-based audits to evaluate the design and effectiveness of internal controls. The auditor will also focus on the integration of IT and business process risk considerations within the audit process. Familiarity and understanding of technology control application in on-premise environments vs. increased automation of controls within cloud service provider (CSP) environments. Understanding of IT-managed processes, including technology architecture, system build, and provisioning, configuration management, performance monitoring, incident management, change management, user access management, disaster recovery, etc.

Evaluate key information security risks including confidentiality, integrity, and availability of technology components through a review of security operational processes, such as vulnerability management, penetration testing, security logging and monitoring, security incident response, and defense-in-depth strategies. Evaluate root cause factors for audit testing exceptions and recommend practical solutions that reduce risk and strengthen business processes and controls. Ensure audit testing work papers are documented in a consistent and high-quality manner while executing project tasks in adherence to established timelines. Build and develop Internal Audit’s brand within the company through meaningful relationship building. Enable continuous improvement of the Internal Audit department by identifying and communicating enhancement opportunities to department leadership. Support the development of other team members within the Internal Audit department.

What you’ll bring

• 1+ years of relevant audit and/or risk management experience.
• Knowledge of auditing principles and practices, and the analysis and reporting of audit information.
• Bachelor’s degree in Auditing, Business Management, or Information Technology.
• Merchant Acquiring / Payment Processing, Card Issuance, and Private-label Consumer Solutions industry experience preferred.
• Familiarity with internal control frameworks, including COBIT, FFIEC, PCI DSS, Sarbanes-Oxley, ISO27001, and ITIL
• Open to 10-15% travel requirement, including some potential international travel
• Merchant Acquiring / Payment Processing, Card Issuance, and Private-label Consumer Solutions industry experience preferred.
• CIA, CISA, CISM, CISSP, or other relevant certifications are preferred
• Professional services audit or risk advisory experience preferred
• It’s a bonus if you have Audit and/or consulting experience in the following: Information and data security for payment card data and publicly-identifiable information
• Technology control applications within cloud environments and usage of automated, processes and cloud architectures such as CI/CD deployment pipelines, infrastructure-as-code, containerization, etc
• Application security, including segregation of duties and least privileged access
• Technology infrastructure security, including cloud computing, mainframe, UNIX/LINUX, Windows, SQL Server and Oracle database
• Systems development, project management, and change management
• On-prem and/or cloud IT infrastructure design, management, and operations,
• Business continuity and technology resiliency including high availability and disaster recovery architecture
• Integration of business process controls with supporting technologies.
• Business process workflow documentation, including identification of key risks and the corresponding business and technology controls
• Ability to work in a complex and evolving environment.
• Demonstrate strong project management and execution skills, including: prioritizing tasks, balancing workload, anticipating next steps, and adapting to change.
• Tailor project approaches based on areas of key risks.
• Critically evaluate audit procedures to maximize the value of each audit project.
• Strong communication and presentation skills with an ability to tailor communications to different audiences.
• Pursue work with enthusiasm, energy, drive, and team collaboration.
• Establish and build effective relationships.
• Collaborate with management and senior leadership to improve internal controls and processes.
• Demonstrates ability to consider all team member’s input before decision-making.
• Proactively communicate issues with colleagues and obtain agreement on audit findings and practical recommendations with control owners before presentation to management.

About the team

Our inclusive and global teams win together every day. We’re proud to have the best minds in the industry, who you can learn from as you grow your career. The people, the energy, the connections – it’s unmatched. Come and be part of an ever-evolving company and get dynamic opportunities that go beyond borders.

What makes a Globalpayer?

Globalpayers think like a client, act like an owner and win as one team. We’re curious and innovative – always finding better ways to deliver impact. We empower each other to make decisions, and it’s our passion that drives excellence in everything we set out to do.

Diversity and EEO Statements

Global Payments is an organization that stands against racism, intolerance and injustice in all its forms — one that respects, honors and celebrates the diversity of our team members and the differences among us. Our commitment to fostering a company culture that values and respects Inclusion and Diversity is steadfast. Standing together as one company, we will continue to work to drive positive change for the communities in which we live and work and stamp out injustice. linkedin.com/in/shonali-r-66744622 -SB Global Payments Inc. is an equal opportunity employer. Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law. If you wish to request reasonable accommodations related to applying for employment or provide feedback about the accessibility of this website, please contact [e-mail]. Global Payments and Worldpay recently joined forces, and we’re currently operating across two Workday application systems. If you don’t see one of your applications here, it may have been submitted in the Worldpay Workday system instead. Across the globe, wherever you are—or wherever you want to be—we’re there, ready to support you. For more information, visit company.globalpayments.com and follow Global Payments on X, LinkedIn and Facebook. Accommodations: Accessibility Requests: If you wish to request reasonable accommodations related to applying for employment or provide feedback about the accessibility of this website, please contact [e-mail] EEOC Statement: Global Payments Inc. is an equal opportunity employer. Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law. Those applicants requiring reasonable accommodation to the application and/or interview process should notify [e-mail].