Consultant, Internal Audit

Celestica•Plano, TX

1d•Onsite

About The Position

Celestica is a global leader in technology solutions, partnering with major companies across various sectors. The IT Internal Audit team plays a crucial role in objectively evaluating risk management controls and providing recommendations to maintain world-class standards. As the Consultant, Internal Audit, IT, you will leverage your expertise in IT systems and infrastructure to ensure the adequacy and reliability of internal controls, analyze data and security factors to minimize risk exposure, and operate as a Level 10 leader with autonomy to achieve team goals and influence management on technology issues across global operations.

Requirements

Experience in IT General Controls (ITGC) related to logical/physical security, change management, business continuity, and network layers.
Understanding of complex IT infrastructures, including cloud-based solutions (Google Cloud, Azure, and AWS platforms) and networking (firewalls, routers, active directory).
Knowledge of security standards (ISO-27000 series), frameworks (COBIT, NIST, COSO), and the current enterprise threat landscape as it relates to global manufacturing.
Experience auditing SAP or similar integrated business applications and their interfaces is a plus.
Ability to evaluate diverse factors and build business cases to provide high-impact recommendations to senior leadership.
Ability to communicate findings to "busy" auditees and management with tact, ensuring a collaborative approach to remediation.
Bachelor’s degree in Computer Science, Information Systems, Business Administration, or Accounting is required.
CISA (Certified Information Systems Auditor) or CISSP (Certified Information Systems Security Professional) designation is required.
Typically requires 6-8 years of applicable experience in IT audit, information security, or IT risk management, preferably within a global manufacturing environment.
Experience conducting cybersecurity assessments, audits, or compliance evaluations.
Working knowledge of NIST SP 800-171, CMMC 2.0 framework, and related DoD cybersecurity policy.
Familiarity with cloud environments (e.g., GovCloud, Microsoft 365 GCC/GCC High) and their CMMC implications.
Proven track record of managing or supporting IT audits and providing recommendations to senior leadership.

Nice To Haves

Experience auditing SAP or similar integrated business applications and their interfaces.

Responsibilities

Lead and conduct comprehensive IT audits and reviews of systems, applications, and IT processes, including audits for new acquisitions and emerging technologies.
Conduct IT security audits across applications (ERP/SAP, Shop-floor, Quality systems), networks, operating systems, and databases.
Evaluate security vulnerabilities and coordinate audit scopes with business units and external security experts.
Lead assessments of NIST SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) compliance.
Provide IT management with guidance on IT risk management, specifically regarding application and infrastructure security.
Design risk and control matrices based on evaluations of underlying business risks.
Perform and review SOX effectiveness testing of IT key controls, including IT General Controls (ITGC), application controls, and key reports.
Oversee the testing of IT General Controls (ITGC), application controls, and key reports identified during the walkthrough process.
Perform pre- and post-implementation reviews of major system enhancements or new global deployments to ensure control integrity.
Interface with senior managers on IT expertise-related issues.
Coordinate with management to formulate action plans and lead follow-up activities to verify the resolution of identified deficiencies.
Participate in the formulation of the annual audit plan, defining the scope, purpose, and objectives of IT-specific audits.
Act as a liaison to outsourced internal auditors and provide IT support to operational auditors.
Interact with and influence management on significant IT and security issues, ensuring cost-effective solutions are implemented to improve controls and enhance business operations.