Consultant, Internal Audit

Celestica International LP•Plano, TX

2d•Onsite

About The Position

Celestica is the brand behind the brands you love in cutting-edge technology solutions, partnering with some of the world’s largest companies across diverse sectors like tech, enterprise, communications, automotive, aerospace & defense, HealthTech, industrial & smart energy, capital equipment, consumer, and robotics. Within this high-tech global landscape, our leadership relies on IT Internal Audit to objectively evaluate risk management controls and provide value-added recommendations that maintain our world-class standards. As the Consultant, Internal Audit, IT you apply your expertise in IT systems and infrastructure to ensure the adequacy and reliability of internal controls. You tackle problems requiring evaluation of data and security factors to minimize risk exposure. Operating as a Level 10 leader, you have the autonomy to deliver on team goals, influence management on significant technology issues, and resolve conflicts with tact and diplomacy across our global operations in the Americas, Europe, and Asia.

Requirements

Experience in IT General Controls (ITGC) related to logical/physical security, change management, business continuity, and network layers.
Understanding of complex IT infrastructures, including cloud-based solutions (Google Cloud, Azure, and AWS platforms) and networking (firewalls, routers, active directory).
Knowledge of security standards (ISO-27000 series), frameworks (COBIT, NIST, COSO), and the current enterprise threat landscape as it relates to global manufacturing.
Experience auditing SAP or similar integrated business applications and their interfaces is a plus.
Ability to evaluate diverse factors and build business cases to provide high-impact recommendations to senior leadership.
Ability to communicate findings to "busy" auditees and management with tact, ensuring a collaborative approach to remediation.
Bachelor’s degree in Computer Science, Information Systems, Business Administration, or Accounting is required.
CISA (Certified Information Systems Auditor) or CISSP (Certified Information Systems Security Professional) designation is required.
Typically requires 6-8 years of applicable experience in IT audit, information security, or IT risk management, preferably within a global manufacturing environment.
Experience conducting cybersecurity assessments, audits, or compliance evaluations
Working knowledge of NIST SP 800-171, CMMC 2.0 framework, and related DoD cybersecurity policy
Familiarity with cloud environments (e.g., GovCloud, Microsoft 365 GCC/GCC High) and their CMMC implications
Proven track record of managing or supporting IT audits and providing recommendations to senior leadership.

Responsibilities

Lead and conduct comprehensive IT audits and reviews of systems, applications, and IT processes.
Responsible for audits involving new acquisitions and the implementation of emerging technology audits with no prior history or background.
Conduct IT security audits across applications (ERP/SAP, Shop-floor, Quality systems), networks, operating systems, and databases.
Evaluate security vulnerabilities and coordinate audit scopes with business units and external security experts.
Lead assessments of NIST SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) compliance.
Provide IT management with guidance on IT risk management, specifically regarding application and infrastructure security.
Design risk and control matrices based on evaluations of underlying business risks.
Perform and review SOX effectiveness testing of IT key controls.
Oversee the testing of IT General Controls (ITGC), application controls, and key reports identified during the walkthrough process.
Perform pre- and post-implementation reviews of major system enhancements or new global deployments to ensure control integrity from the design phase through to go-live.
Interface with senior managers on issues related to your area of IT expertise.
Coordinate with management to formulate action plans and lead follow-up activities to verify the resolution of identified deficiencies.
Participate in the formulation of the annual audit plan, defining the scope, purpose, and objectives of IT-specific audits.
Act as a liaison to outsourced internal auditors and provide IT support to operational auditors.
Interact with and influence management on significant IT and security issues, ensuring that cost-effective solutions are implemented to improve controls and enhance business operations.