Senior IT Auditor

• Moving the SOX and Integrated Audit Support section toward the beginning to emphasize its importance;
• Expanding the responsibilities to clearly include the execution and documentation of SQX IT control testing
• Adding hands-on SOX IT audit experience as a mandatory qualification
• Working with the VP of IA to plan IT audits and develop work programs, timelines, risk assessments, and other planning documents
• Working with IT leadership to document the IT processes and identify and test controls
• Serving as a fieldwork leader by directing daily progress of IT fieldwork, informing the VP of IA of audit status and issues
• Demonstrating and apply a thorough understanding of complex information systems
• Using knowledge of the current IT environment and IT risks, identifying potential audit issues and communicating this information to management through written correspondence and verbal presentations
• Maintaining a continuing commitment to personal development, including an understanding of technology trends as well as statutory and legislative changes impacting IT
• Demonstrating and applying strong project management skills, collaborate with other audit team members and use current technology and tools to enhance the effectiveness of deliverables

• Two to five years’ experience working as an IT auditor or IT security professional for a public accounting firm, professional services firm or within industry
• A degree in business, accounting, finance, computer science, information systems, engineering, or a related discipline
• Strong understanding of SOX controls
• PCI DSS experience preferred
• Strong understanding of IT processes, risks, and controls
• Strong presentation abilities underpinned by effective verbal communication and report writing skills
• Solid IT project management, teamwork and relationship skills
• Desirable Additional Skills:
• CISA or CISSP certification is highly desirable
• Audit / risk experience in a $1B+ business
• Proficiency with ERP controls and security in at least one major ERP package
• Knowledge of COBIT and Sarbanes-Oxley,CRISC, CGEIT, GIAC, CEH, CCNA, MCSE and other certifications are a plus
• Knowledge of vulnerability assessment, network, security and database and IT auditing tools is highly preferred
• Knowledge of networking technologies (e.g. Firewalls, Routers, Switches, Wireless, VLAN, IPS/IDS)
• Knowledge of UNIX / Linux OS security
• Knowledge of Windows OS and Active Directory security

Global Industrial Company (NYSE: GIC) is a leading distributor of high-quality, industrial-strength equipment and supplies, serving organizations of all sizes across a wide range of industries. With more than 75 years of experience, customers rely on us for our broad portfolio of national and private brands, trusted service, and strong value proposition.

We help customers keep their operations running by delivering the right products when they need them-becauseWe Can Supply That.