Associate II | IT Audit - National Attest Office

CBIZ, Inc.•Fort Lauderdale, FL

42d•Hybrid

About The Position

Essential Functions and Primary Duties Design and conduct compliance, and security audit programs by understanding organization objectives, structure, policies, processes, internal controls, and external regulations For scheduled IT audits assist in the risk assessment, planning, and audit program development processes Actively participate in planning, entrance, and/or exit meetings Complete IT audit work papers by documenting audit tests and findings Document systems, processes, and controls using narratives Understand and communicate the downstream impact on the business of IT control deficiencies. Identify and recommend IT process changes resulting in strengthened internal controls as it relates to operations, compliance or reporting (financial or non-financial) objectives Collect and analyze complex data, evaluating information and systems, and drawing logical conclusions. Perform IT risk analysis of functions and activities to determine the nature of operations and the adequacy of the system of internal control to achieve established objectives Plan, participate in/ or execute assigned IT SOX testing and special projects. Preparation of SOX plans, scheduling and communications Work closely with clients' business, technical and project teams Provide oral or written presentations to clients and management during the audit and at the conclusion of each audit or special project Prepare formal written reports for each audit as directed by the Manager, expressing an opinion on the adequacy of the internal control structure and its ability to support the goals and objectives at the client. Perform technical reviews of application controls to identify new/emerging risks and evaluate the impact of these risks within the overall control environment Work on multiple projects simultaneously and manage priorities to meet deadlines Conduct special purpose or consulting assignments Supervise a team of IT Risk professionals

Requirements

Bachelor's degree required
Must have completed at least one busy season
Demonstrated ability to communicate verbally and in writing throughout all levels of organization, both internally and externally
Proficient use of applicable technology
Must be able to travel based on client and business needs

Nice To Haves

Bachelor's degree or Master's degree in Information System, Finance, or Accounting preferred
Completion or in process of completing CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager) or CISSP (Certified Information Security Systems Professional)
CPA License or on track to obtain
Advanced degree in Computer Science/Management Information Systems, Accounting or equivalent education
1 year of internal or external IT auditing experience

Responsibilities

Design and conduct compliance, and security audit programs by understanding organization objectives, structure, policies, processes, internal controls, and external regulations
For scheduled IT audits assist in the risk assessment, planning, and audit program development processes
Actively participate in planning, entrance, and/or exit meetings
Complete IT audit work papers by documenting audit tests and findings
Document systems, processes, and controls using narratives
Understand and communicate the downstream impact on the business of IT control deficiencies.
Identify and recommend IT process changes resulting in strengthened internal controls as it relates to operations, compliance or reporting (financial or non-financial) objectives
Collect and analyze complex data, evaluating information and systems, and drawing logical conclusions.
Perform IT risk analysis of functions and activities to determine the nature of operations and the adequacy of the system of internal control to achieve established objectives
Plan, participate in/ or execute assigned IT SOX testing and special projects. Preparation of SOX plans, scheduling and communications
Work closely with clients' business, technical and project teams
Provide oral or written presentations to clients and management during the audit and at the conclusion of each audit or special project
Prepare formal written reports for each audit as directed by the Manager, expressing an opinion on the adequacy of the internal control structure and its ability to support the goals and objectives at the client.
Perform technical reviews of application controls to identify new/emerging risks and evaluate the impact of these risks within the overall control environment
Work on multiple projects simultaneously and manage priorities to meet deadlines
Conduct special purpose or consulting assignments
Supervise a team of IT Risk professionals