IT Auditor

Wyndham Hotels & Resorts•Parsippany, NJ

1d•$71,500 - $78,000•Hybrid

About The Position

Wyndham Hotels & Resorts is seeking an IT Auditor to join their team. This role will be responsible for evaluating, designing, and testing IT controls within the company. The Auditor will work independently, prepare work papers, communicate findings, formulate recommendations, and draft reports. This position collaborates with IT/Info Security, Compliance, Audit Services, and SOX finance teams to meet compliance objectives. Additionally, the Auditor will perform IT and Information Security audits according to the annual audit plan, document audit results, prepare work papers, and communicate findings to management, external auditors, and stakeholders. The role requires the ability to work in a complex and dynamic business environment, with flexibility for international and multicultural settings.

Requirements

BA/BS degree in Management Information Systems, Computer Science, or related field.
1-2 years of relevant experience SOX GITC/ITGC auditing, preferably Big 4 Public Accounting or similar.
Proficient with Microsoft Office (Excel, Outlook, PowerPoint, Word) is required.
Team player with a positive “can do” attitude, willingness to learn new concepts in a fast-paced environment, be a self-starter, and accept responsibility to meet deadlines.
Strong verbal and written communication skills.
Aptitude for business processes and controls and an understanding of how IT supports and impacts business functions.
Ability to develop and maintain relationships, but also challenge the business when necessary.
Ability to independently evaluate controls over logical access, change management, infrastructure, network, cloud, applications and databases according to established timetables and requirements.
Knowledge of multilayer and multi-technology networks, system, application, and database security, Information Security benchmarks (NIST, CIS, ISACA), privacy laws, Information Security risks and trends.
Experience with infrastructure technologies diverse operating systems (e.g., Virtualization, z/OS, z/VSE, UNIX/Linux and Windows platforms), Cloud security architecture, Network security devices (e.g., firewalls, intrusion detection and prevention systems, proxies, network taps), and relational databases (e.g., Oracle, Microsoft SQL, AS400, DB2, IBM Mainframe).
Understanding of Information Security industry auditing tools (e.g., Nessus, IBM AppScan, CIS Benchmarking Tool, Rapid 7, Symantec Control Compliance Suite CCS).
Understanding of PCI, ISO/IEC 27000 series, ITIL and COBIT standards, European data protection (e.g., GDPR), IT infrastructure and processes, IT governance, project management, principles of internal controls.

Nice To Haves

Security and Audit certifications (e.g., CIPP, CISSP, CISM, or CISA) are highly desirable.
Working knowledge of relevant auditing tools (E.g. Workiva, etc.) is desirable.
Working knowledge of relevant data analytics tools such as ACL / IDEA; SQL or scripting knowledge a plus.

Responsibilities

Lead projects to evaluate, design, and test the control environment of the Company as it relates to IT Controls.
Work independently, prepare work papers, communicate findings, formulate recommendations, and draft reports.
Collaborate with IT/Info Security, Compliance, Audit Services, and SOX finance teams to meet compliance objectives and requirements.
Perform IT and Information Security audits in accordance with the annual audit plan.
Document audit results and prepare audit work papers.
Communicate audit findings to internal audit management, external auditors, and other key stakeholders.
Evaluate control design and identify control gaps.
Execute specific test steps and document results.
Communicate test results and identify control deficiencies.
Collaborate with process owners on the status of control testing.
Formulate recommendations to improve internal control processes and identify other value-adding opportunities.
Assist in process evaluations and identify opportunities for efficiencies.
Follow-up on outstanding action points within an agreed timetable and ensure timely closure of all issues.
Assist in the determination of the annual audit plan and the creation of relevant audit programs.
Document audit testing and results for management review.
Communicate and discuss preliminary audit findings with IT owners, management, and the Senior IT Auditor.