IT Audit Specialist, Sr

Montana-Dakota Utilities Co.•Bismarck, ND

4d•$63,860 - $121,390•Remote

About The Position

This position provides the opportunity to work across a diverse technology environment, evaluating information technology general controls (ITGCs), application controls, cybersecurity practices, and emerging technologies to support the company's commitment to operational excellence and security. As an IT Auditor, you will participate in or lead audits and reviews of information technology processes, systems, and initiatives to assess the effectiveness of controls, identify opportunities for improvement, and provide meaningful recommendations. For the IT Audit Specialist, Sr level, the role expands to leading complex and highly technical audit engagements with a focus on information technology, cybersecurity, and IT risk management.

Requirements

Bachelor’s degree, preferably in information technology or management information systems, but would consider accounting, business administration, or other relevant discipline.
Two years’ experience in data analytics, information technology, management information systems, or auditing or related work experience.
Four years’ experience in data analytics, information technology, management information systems, or auditing or related work experience.
Six years’ experience in information technology, data analytics, IT risk management, IT governance and controls, or auditing three of which include technology risk experience.
Must take all measures necessary to protect networks, devices, programs and data from cyber-attack, damage or unauthorized access.
Must be legally authorized to work in the United States, no sponsorships considered.
Subject to pre-employment drug testing and background checks.

Nice To Haves

Certification as an Internal Auditor (CIA), Information Systems Auditor (CISA), Fraud Examiner (CFE), or similar certification is preferred.
Certification as an Information Systems Auditor (CISA), Information Systems Security Professional (CISSP), Information Security Manager (CISM), Risk and Information Systems Control (CRISC), Governance of Enterprise IT (CGEIT), CSX Cybersecurity Practitioner (CSC-P), Data Privacy Solutions Engineer (CSX-P), Internal Auditor (CIA), Public Accountant (CPA), Fraud Examiner (CFE), or similar IT certification.
Previous experience evaluating emerging technology.

Responsibilities

Conduct or assist in conducting audits or reviews of assigned information technology activities to ascertain whether the company’s Information Technology general controls (ITGC) and application controls are properly designed and operating effectively.
Conduct or assist in the audit or review the implementation or migration to new applications or technology.
Conduct or assist in assessing the risk associated with company Information Technology and recommend processes, policies and procedures to ensure the security and reliability of the company’s information technology environment.
Build, develop and execute data analytics for internal audit. This includes data analytic projects and continuous monitoring techniques executed with consistency and overall strategy, policy and procedures of the company.
Design and deliver analytics that increase the assurance of the audits while also providing insight into the operating effectiveness of the control environment.
Responsible for audit projects with a focus on the more challenging and complex assignments (very technical areas, information technology, cybersecurity and IT general control areas).
Functions as a subject matter expert for IT/IS risk and controls.
Provides guidance and recommends improvements to strengthen information technology, information security and operational controls and business processes.
Conduct audit interviews
Gather audit data and evidence
Prepare audit workpapers
Develop audit findings and recommendations
Prepare or assist with preparation of the audit reports
Participate in entrance and exit conferences
Conduct assigned audit activities in accordance with the International Standards for the Professional Practice of Internal Auditing.
Analyze complex data, identify anomalies/trends/risks, and provide useable insight to improve internal controls.
Assist in designing data analytics protocols, standards, and tools, as well as distribution of analytics prior to and/or during audit fieldwork.
Helps and/or participates in other audits such as IT, financial, operational.
Performs other tasks and special projects as assigned.
Develop, implement, support, and maintain data analytics protocols, standards, and tools, as well as distribution of analytics prior to and/or during audit fieldwork.
Review the work of others assigned to the project.
Research and studies best practice data analytics strategies. Work with Internal Auditing management to determine practices to implement.
Consults with auditors and business personnel to develop and apply data analysis strategies (ex. regression, data visualization, benchmarking, hypothesis testing) to enhance audits. Responsible for writing complex programs, ad hoc queries, and reports. Ensures that all code is developed in a well-structured manner, includes sufficient comments, and is easy to maintain and reuse.
Coordinates and plans with external auditors.
Leads and/or participates in the annual IT risk assessment process.
Reviews designs, codes, and verification phases. Verifies code thoroughly for accuracy of intended purpose.
Explains technical considerations at related meetings, including those with internal clients and team members.
Contributes to audit fieldwork activities for overall process improvement and efficiencies.
Provides training and inter-departmental guidance to leverage and champion data analysis.