Information Technology Auditor

First Orion•North Little Rock, AR

About The Position

The Information Technology Internal Auditor performs IT audit activities across the organization, conducts process reviews, and completes assigned ad hoc projects. The role evaluates IT controls over infrastructure, networks, applications, and databases and applies knowledge of IT corporate governance and internal control assessment methodology. It ensures internal audit examinations are performed professionally, on time, and in accordance with professional standards. The auditor assists with audit engagements and validation procedures, evaluates IT general and application controls, documents audit evidence, and leads planning, testing, and the development of potential audit findings and recommendations. The position also includes managing work within established budgets and timelines, communicating with audit teams and clients, carrying out special projects, updating audit programs, and analyzing audit data and trends for potential compliance violations. First Orion describes itself as a provider of branded communications technology serving businesses, Fortune 500 companies, and major U.S. mobile carriers.

Requirements

Bachelor’s degree in Computer Science, Management Information System, Accounting, Business Administration, Finance, Information Technology, or another business-related discipline.
At least four years of professional experience in information technology, cybersecurity, or information technology audits.
Strong critical-thinking skills, including the ability to assimilate new information, make sound decisions, and manage multiple tasks.
Strong written, verbal, and interpersonal communication skills.
Ability to plan ahead and multitask.
Team-oriented, positive, and willing to learn new concepts in a fast-paced environment; able to work as a self-starter and accept responsibility for meeting deadlines.
Intermediate-level or higher proficiency in Microsoft Word, Excel, and PowerPoint.
At least five years of project or program management experience, including planning, coordinating, and delivering projects within established timelines.
Demonstrable experience collating data and generating reports for upper management, customer audit requirements, and compliance audit requirements.

Nice To Haves

Master’s degree in Accounting, Business Administration, Finance, Computer Science, Management Information, Economics, or a related discipline.
Three to five years of experience performing IT audits.
Experience in the telecommunications industry.
Knowledge of technology and information security risk management principles and relevant standards, such as COSO/COBIT, NIST, ITIL, and ISO/SOC Cybersecurity Framework.
Knowledge and experience with ISO 27001 security controls, including logical and physical security, network and application security, change management, and computer operations.

Responsibilities

Assist in completing internal audit engagements and validation procedures in accordance with the department’s audit methodology and professional standards.
Evaluate IT general controls, including logical access, program changes, backups, job scheduling, IT maintenance procedures, and physical security.
Evaluate application controls, including configurable system parameters and switches, segregation of duties within applications, and end-user computing using tools such as Access, SQL, and other reporting and query tools.
Prepare work papers and document audit evidence, including process documentation, control identification and assessment, flow charts, and testing, in accordance with internal audit documentation requirements.
Lead development of audit planning memoranda, audit programs, and testing approaches.
Lead the writing of potential issues when exceptions are identified, considering root causes and providing recommendations to improve operations.
Organize and complete work within established budgets and timeframes.
Communicate proactively and professionally with the audit team and clients, and develop professional relationships with client contacts.
Perform special projects, including investigations and risk assessments, and other assigned duties.
Work across teams to collate and refine information needed to meet internal audit objectives.
Create an updated internal audit program at least annually to satisfy legal, regulatory, and compliance requirements.
Analyze internal audit data and trends to identify potential compliance violations and send timely, appropriate notifications.