IT Auditor
To apply for this position visit: http://www.dyncorprecruiting.com/ext/detail.asp?dyn2260Position DescriptionJob Summary Conducts advanced level IT audits and/or oversees a staff of IT auditors responsible for auditing information systems, platforms, and operation procedures in accordance with established corporate standards for efficiency, data integrity, accuracy and security.Principle Accountabilities:Work involves leading or conducting information technology and compliance audit projects, and providing consulting services to the organization’s management and staff. Responsibilities May Include:Performs testing of IT controls identified by the Sarbanes-Oxley Compliance Team in support of Sarbanes-Oxley compliance efforts.Provides organization management recommendations for improvements in current risk management controls identified during internal audits and/or consulting activities, system implementations, changes or upgrades.Conducts internal audit work including audit scheduling, audit planning (developing scope, purpose, and risk assessment), fieldwork (interviews, surveys, control design analysis, control testing, and reviewing/analyzing audit evidence and working papers), and reporting of issues noted during audit (defining issues and recommendations).Effectively communicates and/or oversees the communication of results from audit and consulting projects via written reports and oral presentation to the auditee, peers, management and the audit committee.Performs or oversees data extraction and analysis efforts for IT or operational audits.Performs audit procedures, including identifying and defining issues, developing criteria, reviewing and analyzing evidence, and documenting client processes and procedures.Conducts interviews, reviews documents, develops and administers surveys, composes summary memos, and prepares working papers.Identifies, develops, and documents audit issues and recommendations using independent judgment concerning areas being reviewed.Communicates or assists in communicating the results of audit and consulting projects via written reports and oral presentations to management and the audit committee.Develops and maintains productive client and staff relationships through individual contacts and group meetings.Pursues professional development opportunities, including external and internal training and professional association memberships, and shares information gained with co-workers.Represents internal audit on organizational project teams, at management meetings, and with external organizations.Provides or assists in providing training, coaching, and guidance to internal audit staff in conducting audits and other audit-related issues.Plans and executes audits of client/server technology platforms and evaluates IT internal controls and works collaboratively with management to identify actions needed.Conducts data extraction, analysis, and security reviews utilizing software tools.Performs engagements with SOX leadership in the planning and execution of SOX information technology (IT) compliance testing. SOX IT manager will be responsible for determining the scope, along with the nature, timing, and extent of ITGC controls to be tested;Supports audits and consulting engagements related to programming, mainframe batch and online processes, client-server architecture, Internet and intranet functionality, database extraction, technology strategy, and data communication and network security.Acts as liaison with IT business partners to ensure full understanding of data flow, data integrity, and system security.Assesses information technology control elements to mitigate IT risks regarding the confidentiality, integrity, and availability of business information.Performs related work as assigned by Corporate Internal Audit management.Conducts audits at corporate-owned facilities and IT data centers, which may involve some domestic and/or international travel.Adheres to all organizational and professional ethical standards. Knowledge & Skills:Working knowledge of major computing platforms as well as IT security concepts, client/server architecture, database management systems, system development life cycle, IT general controls, disaster recovery planning, IT risk assessments and Enterprise Resource Planning (ERP).Knowledge of management information systems terminology, concepts, IT/Business practices and the ability to evaluate the effectiveness of the IT function including IT Security.Knowledge of Generally Accepted Accounting Principles (GAAP), Control Objectives for Information and related Technology (COBIT), Committee of Sponsoring Organizations of the Treadway Commission (COSO), Information Technology Infrastructure Library (ITIL), and internal controls design and evaluation methods.Knowledge of the Standards for the Professional Practice of Internal Auditing and the Code of Ethics developed by The Institute of Internal Auditors (IIA).Knowledge of Federal Acquisition Regulations (FAR), Joint Travel Regulations (JTR), and Cost Accounting Standards (CAS) preferred.Excellent communication and people skills, including ability to interact with all functions and levels of employees.Proficiency in Microsoft Office applications.Knowledge of Costpoint and TeamMate preferred.Ability to seek and hold security clearance.Experience:Seven (7) plus years experience related to IT, IT auditing, or combination.Sarbanes-Oxley, Internal Auditing (IT, Operational, or Financial), or Public Accounting experience preferred.Supervisory and/or project management experience.Experience with government contract accounting or pertinent industry knowledge preferred.Exposure to system security packages.Possess detailed technical skills (e.g. host assessment) in at least one platform/operation system (e.g. Windows 2000/NT, UNIX, Novell Netware).High level of proficiency in information technology control concepts and system development methodologies.Experience with data analysis tools such as Audit Command Language (ACL), or IDEA.Experience in performing new systems development audits, post implementation assessments or related work experience. Required SkillsEducation:Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance, Business, or an associated discipline.Certified Information Systems Auditor (CISA) required or achievement within one (1) year of employment.Second certification such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA), or Certified Public Accountant (CPA) preferred.Ability to travel up to 10-15%, including international travel.Equal Opportunity Employer - EOE/M/F/V/D: Â
|