Senior IT Auditor

Responsibilities

• Performs relatively complex audit assignments by taking the lead in areas including strategic IT objectives, cybersecurity, IT Infrastructure operations, and ICS/OT systems.
• Performs critical business analysis of issues identified during an audit assignment, including identifying root cause(s) and identifying value-added opportunities for improvement, and effectively communicates the complexities to management in a timely manner.
• Reports and communicates, verbally and in writing, the results of audit assignments to IT Management.
• Works collaboratively with IT Management to help ensure action plans are implemented timely and appropriately to address areas identified as needing improvement.
• Prepares quality and timely workpapers supporting the results of audit-related testing and analysis.
• Performs ongoing business risk monitoring activities to help ensure comprehensive coverage of key IT/Cybersecurity risks.
• Provides functional advice or training to less-experienced audit positions. Acts as a resource for colleagues with less experience. May direct the work of other staff members.
• Continually increases knowledge of emerging IT/Cybersecurity trends and technologies and applies knowledge to enhance the internal control environment of their audit customers.
• All other duties and projects as assigned.

Qualifications

Basic Qualifications

• Bachelor's Degree with 5 years of audit or IT/Cybersecurity experience.
• Ability to assess IT/Cybersecurity risks and determine which are the most pressing versus those that can be addressed at a later time.
• Ability to analyze various aspects of an organization’s information system and identify key risks and control gaps.
• Requires effective, written, verbal, and interpersonal communications skills.
• Working knowledge of IT security and infrastructure and related internal controls.
• Demonstrated ability to lead projects and assignments and perform multiple activities concurrently.
• Technical ability to analyze data using various technologies.
• Professional certification (e.g., CISA, CISM, CRISC, CISSP). Required to obtain certification within 3 years of the job.
• Travel as required.

Preferred Qualifications

• MBA or other advanced degree.
• Highly motivated self-starter with excellent project management skills.
• Knowledge of energy utility operations.