IT Internal Auditor

Cleveland-Cliffs

1d•$70,000 - $90,000•Onsite

About The Position

Cleveland-Cliffs has an immediate opening for an IT Internal Auditor. The IT Internal Auditor will report to the Manager, IT Audit, and work closely with other members of the Internal Audit Department and business and IT stakeholders. This role supports and executes assigned procedures for SOX compliance activities and risk-based IT audits. The auditor will gather and evaluate evidence, document work performed, communicate results, and help identify practical opportunities to strengthen processes and controls across the Company.

Requirements

Bachelors in Information Technology, Information Systems, Business Administration, or related field.
Entry level to three years of professional experience, preferably including internal audit or public accounting experience.
Excellent written and oral communication skills, strong organizational and analytical skills, and project management experience
Managerial courage to confront difficult issues with the appropriate response and to do so in a timely manner with any/all stakeholders
Comprehensive knowledge of the Sarbanes-Oxley Act provisions and methodologies for achieving compliance
Understanding of both Control Objectives for Information and related Technology (COBIT) and general auditing (GAAS) principals
Strong interpersonal skills – ability to work closely with people at all levels of the organization
Proactive – demonstrated ability and desire to improve individual performance and advance the efficiency and effectiveness of the department
Ability to work in a highly complex environment under general direction as to assignment
Ability to solve conflict between differing priorities of various process stakeholders by offering pragmatic solutions to management
Ability to maintain the highest level of ethics, integrity and objectivity
Ability to travel up to 30% to Cleveland-Cliffs locations as required
Applicants for this position must be currently legally authorized to work in the United States on a full-time basis.

Nice To Haves

Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA) or equivalent certification.
Standing membership to the Information Systems Audit and Control Association (ISACA).
Auditing work experience; however, business/operations experience may be deemed adequate.
Data analytics and continuous auditing (RPA) experience.

Responsibilities

Participate in the annual SOX risk assessment by assisting with the mapping of IT assets and technologies to key financial processes and controls.
Assist with control walkthroughs and perform assigned tests of IT General Controls and other technology-related controls within SOX scope.
Execute assigned audit procedures for non-SOX IT audits in areas such as cybersecurity, data governance, cloud security, access management, change management, and IT operations.
Collect, analyze, and document information and audit evidence to support testing results and conclusions.
Evaluate process, system, and control effectiveness using information technology, auditing, and business knowledge, with guidance from more experienced team members as needed.
Clearly communicate testing questions, potential exceptions, and status updates to the audit team and relevant stakeholders.
Assist in developing practical, value-added recommendations to address identified control gaps or process improvement opportunities.
Support the evaluation and documentation of control deficiencies and related management action plans.
Monitor and follow up on the status of action plans arising from audits.
Coordinate and complete special requests, projects, data analysis, and reports as directed by Internal Audit Management.
Develop and maintain effective working relationships with Internal Audit stakeholders.
Perform work in accordance with the Global Internal Audit Standards and applicable professional ethics requirements.
Participate in the continuous improvement of the Internal Audit Department, including the use of data analytics, automation, and AI-enabled audit tools where appropriate.
Support Company-wide initiatives, including sustainability, enterprise risk management, and other projects, as assigned.
Assist in assessing risks and controls related to emerging technologies, including artificial intelligence, machine learning, automation, and advanced analytics.