Internal IT Audit Manager

Audit Manager

Leading complex, large-scale operational, compliance, and financial audits with limited oversight. This includes taking an audit objective and effectively scoping and designing an audit program, including researching, planning, testing, reviewing work papers, and analyzing results to propose insightful recommendations, managing deliverables, reviewing the results with management and monitoring management action plans. Project management, organization, analytical, communication and leadership skills are essential to the position.

Manages a team of third party auditors to deliver high-quality results on time and within budget. Develop audit programs that proactively address organizational risks and align with the strategic priorities of leadership. Drive and lead in-depth IT and integrated audits by evaluating applications, system operations, and supporting infrastructure through the full audit life cycle from planning through fieldwork execution, reporting and following up on management action plans. Identify risks, control gaps, and process improvement opportunities for the organization. Manage and / or execute Sarbanes Oxley control testing, including risk assessment, process walkthroughs, and testing of controls (ITGCs, key reports, application). Build and maintain strong relationships with stakeholders across the organization to foster effective collaboration and communication, while maintaining independence. Provide guidance and support to less experienced auditors, fostering a culture of continuous learning, professional growth and high performance. Support the Company's Enterprise Risk Management (ERM) process. Support and drive departmental process improvements relative to standardization, consistency and compliance with the IIA Global Internal Audit Standards. Keep current on emerging technologies, the evolution of the Internal Audit profession, business & organizational initiatives, and pursue or maintain professional certifications to enhance skills by completing the necessary continuing education.

Professional experience in public accounting, internal audit (Fortune 500 companies), and / or risk consulting. Prior managerial experience with proven ability to develop and mentor team members, fostering a culture of growth and collaboration. Ability to effectively communicate and lead meetings with executive management on complex topics. Clear understanding of IT and financial risks as well as their impact on the business from both technical and procedural perspectives. General knowledge of company operations; retail experience preferred. Experience working independently as well as collaboratively across teams. Strong understanding of IIA, general IT controls, application controls, security controls, and well-known IT security frameworks (e.g. COBIT, ISO 27000, NIST SP 800, etc.). Knowledge of regulatory requirements related to general IT controls and security such as privacy, Sarbanes-Oxley, PCI, and HIPAA. Strong leadership, critical thinking, analysis, and problem-solving skills. Established experience with auditing network devices (e.g., IDS / IPS, firewalls, VPN, etc.), server platforms (e.g., Windows, Linux, AS 400, etc.), database platforms (e.g., Oracle, SQL, etc.), and security controls. Working experience with GRC tools (i.e. AuditBoard, Diligent, Archer, Workiva, TeamMate),) to manage the audit and SOX lifecycle. Ability to analyze data sets and / or use technology to increase efficiency such as automating manual or repetitive activities. Strong leadership, critical thinking, analysis and problem-solving skills. Attention to detail and the ability to provide innovative insights and creative solutions. Strong project management, organizational and communication skills, both written and oral. Ability to build respectful relationships and represent the Internal Audit department with a high level of professionalism. Up to 20% travel, when necessary, in support of a specific audit project.

Bachelor's degree in an engineering / technology related area of concentration such as Information Technology, Engineering Technology, Computer Science, Data Science, Management Information System, etc. Prior managerial experience. 6 or more years of progressive experience, including IT operational auditing, process improvement assessments, SOX, and / or compliance projects. Strong project management experience. A CISA, CISSP, or equivalent certification (or progress toward). Prior experience in public accounting, internal audit, and / or risk consulting for a Fortune 500 is highly preferred. Additional education at the master's level is preferred.