IT Auditor (Staff or Senior)

Tampa Electric Company•Tampa, FL

6h•Onsite

About The Position

The mission of the Audit Services department is to provide assurance and advisory services designed to evaluate and facilitate improving the effectiveness of risk management, governance, and internal controls at TECO Energy and its subsidiaries, while adding value by demonstrating how to improve effectiveness in business operations. The Auditor helps achieve this mission through involvement with department engagements and activities, focusing primarily on those with a heavy financial component (risk assessments, substantive sampling, analytical testing, etc.). The Auditor works closely with other team members, internal clients, and external service providers (auditors, consultants, etc.) to better understand risk and carry out engagements. The Sr Auditor – IT provides assurance and advisory services designed to evaluate and facilitate improving the effectiveness of risk management, governance, and internal controls at TECO Energy and its subsidiaries, while adding value by demonstrating how to improve effectiveness in business operations. Helps achieve this mission through end-to-end execution of department engagements and activities, focusing primarily on those with a heavy information systems component (security risk assessments, ITGC reviews, system implementations, etc.). Works closely with other team members, internal clients, and external service providers (auditors, consultants, etc.) to better understand risk and carry out engagements. Provides technical assistance and guidance and training.

Requirements

Bachelor’s degree with a major in a technology or business discipline (e.g., MIS, Accounting), issued by a regionally accredited institution (SACS, etc.), is required.
None
2 years of direct or related work experience is required. Related experience consists of public accounting or internal audit with a focus on information technology.
Knowledge of basic information system components, including: networks, operating systems, databases, and applications, and related risks
Knowledge of internal control frameworks (e.g., COSO).
Excellent oral and written communication skills.
Excellent investigative, problem solving, and analytical skills.
The ability to leverage computer-assisted auditing techniques for data analysis
The ability to work well independently and part of a team.
The ability to multi-task and work on multiple priorities simultaneously.
The ability to model procedures and processes.
Bachelor’s degree with a major in a technology or business discipline (e.g., MIS, accounting), issued by a regionally accredited institution (SACS, etc.), is required.
3 years of direct or related work experience consisting of public accounting, internal audit, or Information Technology related experience.
Working knowledge of basic information system components, including: networks, operating systems, databases, and applications, and related risks
Working knowledge of fundamental accounting and financial transaction principles
Working knowledge of internal control frameworks (e.g., COSO) and IT operations control frameworks (e.g., CobiT)
Working knowledge of ITGC auditing approaches and methods
Working knowledge of SDLC concepts and risks
Excellent oral and written communication skills
Excellent investigative, problem solving, and analytical skills
Ability to assess emerging information technology and business risks
Ability to leverage computer-assisted auditing techniques for data analysis; Ability to work well independently
Excellent time management skills and the ability to multi-task and work on multiple engagements simultaneously
Ability to lead an engagement team
Ability to provide direction and delegate work to other team members
Ability to model procedures, processes, and systems

Nice To Haves

Master’s degree with a concentration in a technology or business discipline (e.g., MS, MBA), issued by a regionally accredited institution (SACS, etc.), is preferred.
Working towards certifications that demonstrate a breadth of knowledge over internal audit, business, technology, or project management (e.g., CISA, CIA, CPA, PMP).
1-2 years of experience in internal/external auditing, information systems risk advisory or system implementations.
Knowledge of general accepted auditing standards (GAAS).
Knowledge of IIA standards.
Knowledge of the following systems and technologies: SAP ERP (FI/CO, SC, HCM), BW, BPC, GRC, HANA ACL
Master’s degree with a concentration in a technology or business discipline (e.g., MS, MBA), issued by a regionally accredited institution (SACS, etc.), is preferred.
Multiple certifications demonstrating a breadth of knowledge over internal audit, business, technology, or project management are preferred (e.g. CISA, CIA, CPA, PMP).
Experience in information systems risk advisory or system implementations.
Working knowledge of project management best practices
Working knowledge of financial auditing concepts, techniques, generally accepted accounting principles (GAAP) and general accepted auditing standards (GAAS)
Working knowledge of IIA standards
Working knowledge of utility industry technology compliance requirements (e.g., NERC CIP)
Working knowledge of the following systems and technologies: SAP ERP (FI/CO, SC, HCM), BW, BPC, GRC, HANA ACL Customer Relationship Management Systems (CRM) Energy Trading and Risk Management Systems (ETRM) Infrastructure virtualization Industrial Control Systems (e.g., SCADA, DCS)
Ability to use scripting and query languages (e.g., VBA, SQL)

Responsibilities

Performing internal auditing and consulting engagements of technological, financial, and operational areas, with a focus on information systems, as part of the annual engagement plan: Research engagement and activity topics Analyze systems, processes, and controls Document procedures performed Communicate results Collaborate with external auditors Other miscellaneous activities (community service events, draft financial statement review, etc.)
Execute internal auditing and consulting engagements of technological, financial, and operational areas, with a focus on information systems, as part of the annual engagement plan: Research engagement and activity topics Analyze systems, processes, and controls Perform document procedures Communicate results Develop scope, objectives, and procedures Administer budget and schedule Follow Up Review work of others and assign work to others Provide technical guidance and training Collaborate with external auditors Perform other miscellaneous activities (community service events, draft financial statement review, etc.)