Manager, IT Internal Audit

Loews Hotels•New York, NY

1d•$116,000 - $145,000•Onsite

About The Position

The IT Audit Manager at Loews Hotels will lead and manage IT-focused audit endeavors, including Sarbanes-Oxley (SOX) compliance audits over IT general controls (ITGCs) and operational IT audit processes. This role involves collaborating with the VP, Internal Audit on annual risk assessments and audit plans, and establishing positive working relationships with internal and external stakeholders. The position requires a guardian of ethics, a continuous learner, a relentless communicator, an effective leader, and a quick learner who thrives in a dynamic environment.

Requirements

Bachelor’s in accounting, finance, or IT related field required.
A minimum of six years of external or internal audit experience.
Working knowledge of and skill in applying Generally Accepted Accounting Principles (GAAP), Generally Accepted Auditing Standards (GAAS), Institute of Internal Auditors (IIA) Standards, SOX Compliance Requirements, Cyber Security Framework Standards (e.g., National Institute of Standards Technology – NIST), PCI DSS, etc.
Extensive understanding of internal controls and risks with the ability to recognize significant control issues and risk exposure across the organization.
Experience assessing IT risks (including SOX), and evaluating the adequacy, design, and operating effectiveness of ITGCs.
Strong understanding of IT security, governance, network, and infrastructure processes and procedures.
Familiarity with utilizing data analytics tools to gain full coverage of audit population and automate auditing procedures.
Proven track record of successfully managing and leading staff and senior internal auditors to effectively and sufficiently complete audit assignments and timely report on results.
Excellent communication skills (verbal and written) in interactions with team members at all levels, including control or business process owners and senior management.
Strong interpersonal skills with the ability to effectively develop and maintain positive working relationships cross-functionally with all levels of team members (e.g., Accounting, Finance, Operations, Compliance, Legal, HR, Loews Corporate Internal Audit, etc.) and external parties (e.g., co-source partners and external auditors).
Flexibility to work independently and in a team-oriented environment depending on assignment needs.
Ability to work a flexible schedule based on business needs.
Must be willing and able to travel up to 30% of the time, depending on business needs.

Nice To Haves

Master’s degree in referenced fields preferred.
Combination of Public Accounting (external audit) and Internal Audit experience preferred.
IT audit experience at a company within the hospitality, restaurant, and retail industries, preferred.
Knowledge of systems and applications such as, Oracle Enterprise Resource Planning (ERP), Workday Human Resources Information System (HRIS), Opera Property Management System (PMS), etc. with the ability to utilize system reports for audit testing and data analytics, preferred.

Responsibilities

Perform annual risk assessments to develop the annual risk-based audit plan.
Evaluate the adequacy and operating effectiveness of internal controls by conducting audits of all business units (corporate/home office, hotel properties, and the shared service center).
Communicate audit recommendations to remediate audit issues or concerns identified.
Provide IT advisory and assurance services to improve internal controls, operations, risk management, and compliance.
Provide independent, objective IT assurance and advisory services to assess, evaluate, and validate the design and operating effectiveness of internal controls.
Add value towards continuous process improvement opportunities within the organization.
Lead and manage the planning, fieldwork, and reporting phases of IT compliance audits (including the review of quarterly IT SOX compliance certifications and completion of annual IT SOX compliance audits as required by SOX 302 and SOX 404, respectively) across the organization.
Participate in the Annual Audit Risk Assessment and Enterprise Risk Management (ERM) processes.
Understand standard operating procedures and risk management policies, IT security and governance policies.
Interview key internal stakeholders.
Review control self-assessments (CSAs) completed by hotel management.
Analyze financial data and information to define annual risk-based audit plans.
Share input and ideas towards developing audit risk and control matrices.
Map/document processes and procedures (e.g., flow charts and walkthrough narratives).
Create/enhance audit methodologies and strategies.
Perform detailed IT audit testing procedures during the fieldwork phase.
Maintain supporting audit workpapers.
Thoroughly document any audit results and issues identified.
Execute integrated audits consisting of financial, operational, IT, and compliance auditing procedures in collaboration with the Audit Manager.
Clearly and timely communicate audit results and significant findings to the VP, Internal Audit, business and process owners, and senior management.
Effectively advise on audit recommendations and corrective action plans to remediate issues.
Assist with drafting formal audit reports and presentations for the Audit Committee, Executive and Senior Leadership team members, and all other related key stakeholders.
Partner with the IT Security and Governance team to assess and evaluate all IT general controls (ITGCs).
Complete special projects involving Cyber Security, Data Governance & Classification, Service Organization Controls (SOC) Reviews, System Implementations, Payment Card Industry Data Security Standards (PCI DSS) Compliance, etc.
Collaborate with the IT Business Intelligence team to design data analytics for continuous monitoring and automated audit testing by leveraging available analytical tools and resources.
Hire, train, coach, and develop new staff and senior internal auditors, as needed.
Co-lead and manage internal and external parties (e.g., co-source partners) to conduct planned audits.
Coordinate with external auditors for interim and year-end financial statement audits, as necessary.
Attend all required training sessions and meetings.
Perform other duties as assigned.