Director, IT Internal Audit & Controls

Real•Newark, CA

About The Position

Real is seeking a Director, IT Internal Audit & Controls to join our Internal Audit & Controls team. Reporting to the Vice President of Internal Audit & Controls, you will play an integral role in supporting the development, continuous improvement and management of the Internal Audit & Controls program with an initial key focus on the development of internal audit and controls methodology as well as continuing our successful efforts to maintain and improve an effective Sarbanes-Oxley (“SOX”) Compliance program. The successful candidate is a motivated hands-on leader who possesses a blend of technical IT audit and SOX acumen, strategic thinking, practical execution abilities, strong project management and regulatory compliance skillsets. Your insights will be documented and conveyed through various comprehensive reports on the outcomes of your endeavors.

Requirements

Mix of external and internal audit and industry experience preferred.
Demonstrated knowledge and practical application of internal audit and control strategies, methodologies and auditing standards, financial and operational risks and controls, as well as strong working knowledge of IIA standards, PCAOB standards, SEC regulations and COSO and ISACA Frameworks.
Excellent concept and deep knowledge of Information Technology General Controls (ITGC); able to recognize significant control issues as well as the ability to recognize exposures in emerging risks.
Strong understanding of IT SOX compliance requirements and experience managing IT SOX initiatives in a publicly traded company environment.
Deep knowledge of internal audit principles, practices, and methodologies, as well as industry best practices and regulatory standards.
Expertise in cybersecurity frameworks (e.g., NIST, SOC2 and COBIT) and IT governance principles.
Exhibit strong analytical, problem-solving, and decision-making acumen.
Demonstrate proficiency in project management and organizational competencies.
Works well independently with minimal supervision with extensive latitude for innovative thinking and independent judgement.
Excellent interpersonal skills and the ability to engage and collaborate with all levels of management, external auditors and all members of the Internal Audit & Controls team.
Excellent verbal and written communication and presentation skills.
Excellent analytical, problem-solving, and decision-making skills, with an initiative-taking approach to problem solving and the ability to think strategically and provide practical solutions to complex and novice issues.
Strong MS Office skills.
Bachelor’s degree in Information Systems/Technology, Accounting or a related field.
Relevant certification(s) such as Certified Internal Auditor (CIA), Certified Public Accountant (CPA) or Certified Information Systems Auditor (CISA).
Ten or more years of progressively advancing experience in supporting a company’s risk-based IT internal audit and SOX program; ideally with a mix of IT consulting, public accounting, and/or public company internal auditing.
Minimum of six years in a leadership and/or supervisory role.
Experience working in an organization with complex operational, IT and regulatory environments.
Experience with Governance, Risk and Compliance (GRC) tools to manage, automate and measure audit and internal control objectives and projects.

Nice To Haves

Experience with data analytic and/or robotic process automation (RPA) tools is a plus.

Responsibilities

Collaborate with the Internal Audit & Controls team in developing and implementing the overall risk-based audit and controls strategy and methodology.
Actively engage in the development and execution of the annual risk-based internal audit plan in alignment with the Company’s strategy and other objectives.
Perform annual financial, operational, IT and fraud risk assessment activities.
Manage the organization's SOX compliance program, ensuring adherence to regulatory requirements and best practices.
Conduct periodic assessments and testing of internal controls to evaluate their effectiveness in addressing financial reporting, operational and IT risks.
Orchestrate risk-based IT operational audits from inception to culmination, encompassing scoping, fieldwork, and the formulation of audit findings.
Lead and conduct detailed, integrated IT risk-based audits and/or reviews of core financial and business operations IT systems and applications to assess performance, controls and compliance.
Assess the company’s cybersecurity measures protecting sensitive customer data and financial transactions.
Identify root cause(s) of inefficiencies and assist stakeholders in developing actionable recommendations that address the root cause(s).
Communicate audit findings, recommendations, and risk exposures to stakeholders in a clear and concise manner on an ongoing basis, fostering understanding and collaboration.
Collaborate with senior management and process owners across the organization to develop and implement corrective actions.
Walkthrough significant IT processes and identify key financial reporting and IT control activities.
Aid in developing foundational internal IT audit SOPs, KPIs and performance management navigator aligned to IIA best practices.
Leverage data analytic and robotic process automation technology to enhance audit coverage, identify anomalies and improve audit effectiveness and efficiency.
Skillfully manage multiple audit engagements concurrently, ensuring the identification and resolution of pertinent audit risks, timely completion of audits, and the effective communication of value-added/risk-centric insights to management.
Proficiently lead, mentor and develop a high-performing and highly collaborative internal audit team, while competently managing and finalizing audits of varying intricacy within designated deadlines.
Play a significant role in the development of Internal Audit and Controls team members to support their engagement as well as professional growth and goal achievement.
Aid in preparing quarterly audit committee materials, managing audit engagement resources, and tracking remediation processes.
Support special project engagements, as needed.