Assist in the development of Risk Assessable Entities for a defined scope of technologies or operations as input to the annual risk-based audit plan.
Lead audit fieldwork, including planning, execution, and documentation of audit procedures, in accordance with Company and Internal Audit standards, ensuring quality and timeliness.
Provide guidance and direction to other auditors during audit engagements.
Perform detailed testing and analysis to evaluate the design and operating effectiveness of internal controls.
Document audit findings and recommendations in a clear, concise, and well-supported manner.
Communicate audit findings, recommendations, and management's responses to audit management.
Develop and maintain strong relationships with key stakeholders, including operating partners and internal audit partners.
Peer review audit workpapers to ensure audit findings and recommendations are supported by sufficient evidence.
Stay up-to-date on emerging technology risks and audit best practices.
Interact regularly with internal Cyber Defense, Office of General Council (OGC) and Security Policy teams.

Requirements

Bachelor’s degree in computer science or related field, Master's degree preferred.
Three to five years of IT audit or IT security experience and/or IT experience, including software engineering, application development, and/or infrastructure design and operations.
Current audit certification (CISA or similar technical certification).
Proven Cybersecurity knowledge through experience or certification (ISC2’s CISSP or similar).
Strong understanding of industry security frameworks (e.g. NIST CSF, ISO 27001, etc.) and understanding of inherent risks and/or control risks.
Experience of working in global teams.
Comfortable working in a dynamic environment with minimal direction, and as part of a team, with a strong sense of accountability and attention to detail.
Excellent English verbal and written communication skills with the ability to communicate effectively with all levels of leadership.
Possesses excellent interpersonal skills, demonstrating professionalism in all actions.
A variety of IT job experiences preferred including application development, systems analysis, technical support, database administration, security administration and office automation.
Strong project management skills.

Benefits

Immediate medical, dental, vision and prescription drug coverage
Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
Vehicle discount program for employees and family members and management leases
Tuition assistance
Established and active employee resource groups
Paid time off for individual and team community service
A generous schedule of paid holidays, including the week between Christmas and New Year’s Day
Paid time off and the option to purchase additional vacation time.

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

IT auditIT securitysoftware engineeringapplication developmentinfrastructure designinternal controlsaudit proceduresrisk assessmenttesting and analysisproject management

Soft Skills

communication skillsinterpersonal skillsleadershipattention to detailaccountabilityteamworkprofessionalismguidance and directionrelationship buildingadaptability

Certifications

CISACISSP