IT Auditor

Wyndham Hotels & Resorts•Parsippany, NJ

11d•Onsite

About The Position

Wyndham Hotels & Resorts is seeking an IT Auditor to join their team. This role reports to the Senior IT Auditor and is responsible for evaluating, designing, and testing the company's IT control environment. The Auditor will work independently, prepare work papers, communicate findings, formulate recommendations, and draft reports. This position collaborates with IT/Info Security, Compliance, Audit Services, and SOX finance teams to meet compliance objectives. Additionally, the Auditor will perform IT and Information Security audits according to the annual audit plan, document audit results, and communicate findings to management and stakeholders. The role requires the ability to work in a complex and dynamic business environment, with flexibility for international and multicultural settings.

Requirements

BA/BS degree in Management Information Systems, Computer Science, or related field.
1-2 years of relevant experience in SOX GITC/ITGC auditing, preferably from Big 4 Public Accounting or similar.
Proficient with Microsoft Office (Excel, Outlook, PowerPoint, Word).
Ability to independently evaluate controls over logical access, change management, infrastructure, network, cloud, applications, and databases according to established timetables and requirements.
Team player with a positive “can do” attitude, willingness to learn new concepts in a fast-paced environment.
Self-starter, accepting responsibility to meet deadlines.
Strong verbal and written communication skills.
Aptitude for business processes and controls and an understanding of how IT supports and impacts business functions.
Ability to develop and maintain relationships, and challenge the business when necessary.

Nice To Haves

Security and Audit certifications (e.g., CIPP, CISSP, CISM, or CISA) are highly desirable.
Working knowledge of relevant auditing tools (e.g., Workiva, etc.) is desirable.
Working knowledge of relevant data analytics tools such as ACL / IDEA.
SQL or scripting knowledge is a plus.
Knowledge of multilayer and multi-technology networks, system, application, and database security.
Knowledge of Information Security benchmarks (NIST, CIS, ISACA).
Knowledge of privacy laws, Information Security risks and trends.
Experience with infrastructure technologies diverse operating systems (e.g., Virtualization, z/OS, z/VSE, UNIX/Linux and Windows platforms).
Experience with Cloud security architecture.
Experience with Network security devices (e.g., firewalls, intrusion detection and prevention systems, proxies, network taps).
Experience with relational databases (e.g., Oracle, Microsoft SQL, AS400, DB2, IBM Mainframe).
Understanding of Information Security industry auditing tools (e.g., Nessus, IBM AppScan, CIS Benchmarking Tool, Rapid 7, Symantec Control Compliance Suite CCS).
Understanding of PCI, ISO/IEC 27000 series, ITIL and COBIT standards.
Understanding of European data protection (e.g., GDPR).
Understanding of IT infrastructure and processes, IT governance, project management, principles of internal controls.

Responsibilities

Lead projects to evaluate, design, and test the control environment as it relates to IT Controls.
Work independently, prepare work papers, communicate findings, formulate recommendations, and draft reports.
Collaborate with IT/Info Security, Compliance, Audit Services, and SOX finance teams to meet compliance objectives.
Perform IT and Information Security audits in accordance with the annual audit plan.
Document audit results and prepare audit work papers.
Communicate audit findings to internal audit management, external auditors, and key stakeholders.
Evaluate control design and identify control gaps.
Execute specific test steps and document results.
Communicate test results and identify control deficiencies.
Collaborate with process owners on the status of control testing.
Formulate recommendations to improve internal control processes and identify value-adding opportunities.
Assist in process evaluations to identify opportunities for efficiency improvements.
Follow up on outstanding action points and ensure timely closure of issues.
Assist in determining the annual audit plan and creating relevant audit programs.
Document audit testing and results for management review.
Communicate and discuss preliminary audit findings with IT owners, management, and the Senior IT Auditor.