Senior IT Internal Auditor

GENERAL SUMMARY: This position will report to the Director, Internal Audit and Operational Analysis within the Office of Internal Audit and Operational Analysis (OIAOA).  The Senior IT Auditor will be responsible for planning and executing information system audits to assess the adequacy of the information control environment.  This position is also responsible for the IT work plan related to Sarbanes-Oxley Section 404.  Work involves planning, preparing documentation, interviewing clients, designing test procedures, and executing and facilitating testing with other groups.  Technical reviews of controls related to Access, Change Control, Manage Data, Network/Workstation Security, and Mainframe/UNIX/Windows operating systems.  This position will require strong analytical skills and a thorough understanding of Information Technology. Working knowledge of all applications utilized throughout the organization is essential.  This position will supervise up to two permanent staff members in addition to IT consultants as deemed necessary.

 

 

ESSENTIAL FUNCTIONS AND RESPONSIBILTIES:

Plan:

q Establish audit objectives and assist in the development and maintenance of the annual IT audit plan.

q Develop audit tests that maximize efficiency and effectiveness of the audit process, ensuring a high-degree of assurance.

q Performs audits in accordance with professional and Company standards.

q Assists in ensuring adequate audit planning occurs to obtain an underlying understanding of the business process, ensuring a high-degree of assurance.

q Participate in planning special projects to meet the needs of management.

Do:

q Develop and execute Sarbanes-Oxley IT testing activities.

q Execute reviews of major technology applications and/or infrastructure components providing guidance to the rest of the process audit team regarding technical concepts.

q Execute audit work to assess the adequacy of the information systems control environment supporting the identified business processes and their related risks.

q Evaluate and document system-related controls supporting applications, operating systems, databases, networks, and other technologies.

q Work collaboratively with OIAOA management to ensure audit results (i.e. report) clearly communicate the identified risks/exposures and their identified root cause(s) to business unit and executive level management.

q Work collaboratively with business unit management when they are developing action plans to address identified risks/exposures by providing relevant and practical recommendations.

q Assist in the implementation and maintenance of audit productivity tools.

q Identify output, process measures, establish data collection plans, monitor process performance

q Assist in the implementation and use of data analysis tools (e.g. ACL, Microsoft Access/Excel) to support the overall internal audit function.

q Stay abreast of the changing technology industry and risks.

q Continuously enhance personal understanding of the Company?s strategy, business model, and business processes.

q Oversee change initiatives to ensure that they occur by agreed to deliverable dates.

 

Study:

q Analyze audit test results and summarize qualitative findings in order to provide Senior Management with detailed recommendations.

q Review the reliability and integrity of IT processes and the internal control systems used to report such information.

q Review the IT system controls established to ensure compliance with applicable policies, plans, procedures, laws and regulations.

q Evaluate potential exposure or risk in various CCH IT operations.

q Review and analyze IT systems to determine if opportunities exist for integrating, reducing and/or improving current subsidiary processes.

Act:

q Analyze various IT reporting tools to ensure data being utilized at the user level is timely and accurate.

q Follow-up on action plans for IT remediation items from audits to ensure timely implementation.

q Consistently monitor IT compliance issues and determine what intervention is needed to ensure that subsidiaries are in compliance with CIS Policy and Procedures.

 

KEY MEASURES: Ability to adequately test and assess the various IT general and IT application controls throughout the organization.  Ability to meet deadlines relating to the Sarbanes-Oxley schedule and work plan.  Effective project management and communication skills.

 

KNOWLEDGE, SKILLS AND ABILITIES REQUIRED

The Senior IT Auditor will need to be familiar with and have either experience or skills related to the following areas:Bachelor?s degree (BA/BS) in computer science or accounting 3+ years of experience in auditing information systems, systems security or internal audit, specializing in application processing or operating systems platforms. Big 4 experience preferred.Professional designations such as CISA (Required), CIA, CISSP preferredTechnical expertise, objectivity, and unquestioned integrity are essential elements of this position. Working knowledge of Sarbanes-Oxley Act Section 404 in addition to proven aptitude of IT auditing principles and IIA principles. Experience working with CobiT framework.Strong interpersonal skills and the ability to successfully interact with various levels of business unit management.Ability to communicate complex information in a clear and concise, manner to a technical and non-technical audience.Excellent PC skills, Microsoft Office Suite products (Word, Excel, Access, PowerPoint) and familiarity with MS Project, Visio flowcharting and audit productivity software packages.Superior analytical skills and overall business acumen