Information Technology / Systems Internal Audit Senior

To apply knowledge of database platforms, operating systems, enterprise resource planning systems, and network directories to gather evidence of the related physical, financial and business operations, systems, and practices for evaluation.

• Risk Assessment & Scoping:
• Assess IT risks, develop risk-based audit plans and scopes, and create test procedures for core technology processes.
• Control Testing:
• Assess existence, efficiency, design and operating effectiveness of the IT control environment and its governance processes.
• Lead General Computer Controls (ITGC) testing, application controls evaluation, and assessments of network, database, and endpoint security.
• Fieldwork & Execution:
• Manage daily IT audit fieldwork, validate audit evidence, prepare work papers, and ensure projects finish on time and within budget.
• Reporting & Recommendations:
• Draft clear audit reports, identify control weaknesses or gaps, and facilitate the definition of actionable remediation strategies with management.
• Team Leadership & Collaboration:
• Coach internal audit colleagues, assist in data extraction, assist in the review team outputs, and coordinate with internal stakeholders, external auditors, and process owners.
• Facilitate the development and maintenance of the continuous monitoring program.
• Remediation Tracking - Follow up on past audit findings and test corrective actions or re-testing activities.

• A degree in Information Technology/Computer Information Systems, Computer Science or related (essential).
• Certified Information Systems Auditor (CISA) (essential).

• Four (4) years of auditing experience, of which at least two years must be as an IT auditor.

• Knowledge or experience in related fields:
• Firewalls (functionality and maintenance), Office 365 Security, VSX and Endpoint Security.
• Financial and IT application experience
• VPN, Data Loss Prevention, IDS/IPS, Web-Proxy and Security Audits.
• Cyber security trends and hacking techniques
• Data privacy laws
• General operating system/database architectures.

• Clear understanding of IT audit methodologies and familiarity with frameworks such as COBIT, NIST, ISO 27001/27002, and ITIL.

• Intermediate to advanced level proficiency in Microsoft Word and Excel
• Strong verbal and written communication skills, to effectively present to peers and management.
• Experience in performing multiple projects and working with varying team members.
• Experience in auditing of food manufacturing operations would be an asset.