Associate Information Systems Auditor

General Summary

Kia America (KUS) is seeking an Associate Information Systems Auditor on the Operational Risk Management (ORM) team. This is an individual contributor role reporting to the Information Systems Audit Manager. The ORM team oversees KUS’s risk management processes including KSOX compliance (preventive), continuous monitoring (detective), and corrective actions (responsive). The position will play a critical role in ensuring Kia’s information technology systems, data, and processes are secure, reliable, and compliant with KSOX regulations. The Associate Information Systems Auditor will also provide systematic support during various projects of Corporate Audit and Dealership Audit teams.

Essential Duties and Responsibilities

1st Priority - 55%

Assist Information Systems Audit Manager in the testing of Kia’s compliance with K-SOX requirements and COSO framework.

• Support periodic testing on an annual, quarterly, and monthly basis, including automated and general IT controls.
• Coordinate with external auditor by preparing PBC (Provided By Client) requests and supplying necessary documentation, samples, and proof for concurrent testing.
• Conduct internal testing of systems and controls to ensure compliance and proper functionality.
• With direction from Information Systems Audit Manager, maintain and update audit procedures, flowcharts, and control steps as business practices evolve.

2nd Priority - 20%

Assist Information Systems Audit Manager during the team’s participation in Corporate Audit and Dealership Audit team’s continuous monitoring of Kia’s business operations, including deficiency identification and corrective action implementation.

• Collect and compile necessary data based on audit requirements, perform analysis, and prepare findings.
• Coordinate with the Information Systems Audit Manager to ensure the appropriate data and analyses are available for review.
• Present findings to the Audit Manager for discussion with Corporate Audit and Dealership Audit teams.

3rd Priority - 20%

Assist Information Systems Audit Manager during new system implementation for KSOX and Corporate Audit teams and their utilization of the new system.

• Facilitate communication between IT and Internal Audit departments for new department IT projects and system implementations.
• Gather and document business requirements, translate them into technical terms.
• Provide project management support, including scheduling, milestone tracking, and follow-ups, under the direction of the Audit Manager.
• Coordinate across multiple projects simultaneously, maintaining communication with IT team members and escalating issues to the Audit Manager for resolution as needed.

4th Priority - 5%
Develops Internal Auditing skills, experience and KUS operations understanding on the job.

• Perform administrative tasks, recordkeeping, reporting, and other routine audit responsibilities.
• Draft correspondence, memos, proposals, and audit reports as assigned.
• Communicates activities and seeks guidance from Internal Audit management.
• Complete required annual Continuing Professional Education (CPE) training.
  

Qualifications/Education

Education:

• Bachelor's degree in Information Systems, Accounting, Computer Science, or relevant work experience required

Job Requirement

Overall Related Experience:

• 0-2 years of corporate audit experience required.
• Experience in IT auditing, technology risk assessments, or IT internal control evaluations preferred.
• Experience in SOX compliance testing and operational audits a plus.
• Experience with SAP a plus.
  

Specialized Skills and Knowledge Required

• Excellent soft skills, communication, and professional demeanor while auditing KUS Departments, Business Processes and Vendors.
• Develop good working relationships with KUS Departments.
• Proficient understanding of IT systems, networks, cybersecurity principles, and cloud security.
• Basic understanding of relevant auditing tools/software.
• Ability to analyze complex data, identify patterns, and draw conclusions regarding IT controls and potential risks.
• Ability to communicate effectively both in writing and verbally.
• Understanding how IT systems support business operations and ability to align audit findings with organizational goals.