IT Auditor

Description

American Credit Acceptance (ACA) has an exciting opportunity for an  IT Auditor  to join our dynamic Internal Audit team. The candidate shall perform and execute the annual internal audit plan of IT, operational, field, compliance, regulatory and investigative audits to ensure the reliability and integrity of information, compliance with policies and regulations, the safeguarding of assets, the economical and efficient use of resources and established operational objectives of American Credit Acceptance.  This responsibility includes performing IT audit procedures and preparing internal audit reports reflecting the results of the work performed. The candidate will be involved with all facets of Information Technology and Information Security and must be able to clearly articulate technical related risks to technical and non-technical members of executive management.

This is an on-site role based out of our Corporate office in Spartanburg, SC.

Essential Functions

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Primary function will be to perform risk based / security audits in areas including, but not limited to, applications (internal & external facing), databases, operating systems, network, sensitive data, patch management, change management, BCP / DR, third party, cloud, etc.
• Performs work under direct supervision.
• Interact with external audit firms and provide guidance and support for audit engagements.
• Effectively executes test procedures and conclude on the operating effectiveness of relevant controls through the development of formal reports.
• Leverages appropriate resources for planning the audit engagement, and effectively leads interviews / meetings to ensure relevant information is obtained for analysis.
• Performs an appropriate level of testing based on the scope and risk, without over- or under-auditing.
• Produces work paper documentation that is clear and concise, provides adequate detail of work performed and conclusions reached, meets department and professional standards, and is sufficient to receive a satisfactory rating from reviewers.
• Communicates obstacles or problems as they are encountered throughout the audit.
• Identifies control issues and findings timely, and ensures findings are based on relevant facts and are accurately characterized (based on risk).
• Clearly communicates control findings to Internal Audit Management as they are identified.
• Working with ACA’s external auditors to coordinate IT coverage across areas of responsibility and ensure that audit work is comprehensive and sufficient to allow the external auditors to rely on the work.
• Challenges the ‘status-quo’ and brings original ideas to the team.
• Fosters a team environment, is inclusive and works well with others.
• Other tasks as assigned.

Qualifications

Supervisory Responsibility

This position has no supervisory responsibilities.

Work Environment and Physical Demands

This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.

Position Type / Expected Hours of Work

This is a full-time position with a work schedule of Monday-Friday with some schedule variations as needed.

Travel

Up to 10% travel could be expected for this position.

EEO Statement

ACA provides equal employment opportunities (EEO) to all applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws.  ACA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.

California Privacy Notice

"As an employer of California residents, we are dedicated to protecting your privacy rights. Any personal information you provide during the application process will be used solely for permitted internal purposes and will be handled in accordance with applicable privacy laws. By applying to this position, you consent to the collection, use, and disclosure of your personal information as described in our Employee Privacy Notice ."

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

You are not officially considered an applicant unless you have completed an employment application in ACA's online applicant tracking system, Jobvite.