Senior Internal Auditor-Information Technology

JEA•Jacksonville, FL

About The Position

Effectively coordinates, supervises, designs, and performs Information Technology (IT) related audit work for company operations, business activities, financial systems, internal controls and performance management systems in accordance with the Institute of Internal Auditors (IIA) Standard Practices and ISACA best practices. This encompasses performing all phases of the audit including planning, fieldwork, compiling the audit report, informing internal customers of audit results, proactive consultation with auditees regarding IT audit recommendations /action plan implementation, and monitoring of IT related action plans. In consultation with the Audit Director, performs special IT related projects which are designed to assist internal customers, including the Senior Leadership Team (SLT). Performs annual and project level risk assessments of IT and certain operational business units. Assists/mentors other staff members in performing IT components of operational audits. Performs ongoing research on current activities and trends in the IT arena, particularly with respect to cybersecurity, attacks and the newest types of malware and monitoring tools. Performs annual and project level risk assessments, determines/recommends the scope of IT audit work to the Audit Director, and estimates IT audit resource needs. Interprets and evaluates IT policies and procedures, and applies professional IT audit standards and concepts to test and evaluate company records, operations, and systems. Consults industry guidelines and information systems audit reference materials to ensure adequate coverage and scope. Through research, maintains awareness/knowledge of the latest IT trends in software tools, malware breaches, and cyber security concerns, and where appropriate, notifies the Audit Director and IT management. Where practical, utilizes automated audit techniques to improve accuracy, efficiency and effectiveness of the audit function. Examines and evaluates system and program documentation, test procedures and results, processing controls, input and output data, reports, change management, disaster recovery, and system reliability, security, and documentation to determine if controls and processes are adequate. Reviews and evaluates the adequacy and efficiency of computer applications, hardware, software, and network controls. Reviews and evaluates proposed and pre-implementation applications to provide input into the design of new systems and their controls. Develops issues and recommendations for bringing applications and operations into compliance with industry and company standards and objectives. Coordinates with external auditors and Council Auditors, and follows-up on IT recommendations from their audits. Performs special reviews at the request of the Audit Director or SLT members. Conducts internal audits from start to finish, inclusive of planning, fieldwork/testing, report writing, and following up on recommendations and action plans. Interacts independently with auditees at all levels from the Senior Leadership Team to rank and file employees. Identifies issues raised in audits and special projects, and communicates them verbally and in written reports, offering recommended control enhancements relevant to the business and risk level. May serve as a lead auditor identifying roles/responsibilities/expectations of the audit team. Reviews work performed by team members. Develops audit programs and testing procedures relevant to risk and test objectives. Ensures audit conclusions are well-documented and based on a complete understanding of the process, circumstances, and risk. Establishes and maintains effective working relationships with auditees, in particular, IT management. Ensures audits address JEA corporate strategies with regard to IT functions. Ensures adequate focus on personal professional growth, seeking relevant training opportunities to maintain expertise levels and retain active CISA certification. Ensures effective coordination within Audit Services and the Compliance Department, particularly with respect to cyber security. Provides leadership and example in meeting JEA ms safety and wellness goals. Performs other job-related duties as assigned.

Requirements

A bachelor's degree in information systems, accounting, finance, business, or related field
Minimum of five (5) years of relevant audit experience, with at least three (3) years in an internal IT audit role, or equivalent IT experience
OR An equivalent combination of education, experience, and/or training.
A valid driver's license is required prior to appointment and must be maintained during employment.
An IT related certification, preferably a CISA.

Responsibilities

Effectively coordinates, supervises, designs, and performs Information Technology (IT) related audit work for company operations, business activities, financial systems, internal controls and performance management systems in accordance with the Institute of Internal Auditors (IIA) Standard Practices and ISACA best practices.
This encompasses performing all phases of the audit including planning, fieldwork, compiling the audit report, informing internal customers of audit results, proactive consultation with auditees regarding IT audit recommendations /action plan implementation, and monitoring of IT related action plans.
In consultation with the Audit Director, performs special IT related projects which are designed to assist internal customers, including the Senior Leadership Team (SLT).
Performs annual and project level risk assessments of IT and certain operational business units.
Assists/mentors other staff members in performing IT components of operational audits.
Performs ongoing research on current activities and trends in the IT arena, particularly with respect to cybersecurity, attacks and the newest types of malware and monitoring tools.
Performs annual and project level risk assessments, determines/recommends the scope of IT audit work to the Audit Director, and estimates IT audit resource needs.
Interprets and evaluates IT policies and procedures, and applies professional IT audit standards and concepts to test and evaluate company records, operations, and systems.
Consults industry guidelines and information systems audit reference materials to ensure adequate coverage and scope.
Through research, maintains awareness/knowledge of the latest IT trends in software tools, malware breaches, and cyber security concerns, and where appropriate, notifies the Audit Director and IT management.
Where practical, utilizes automated audit techniques to improve accuracy, efficiency and effectiveness of the audit function.
Examines and evaluates system and program documentation, test procedures and results, processing controls, input and output data, reports, change management, disaster recovery, and system reliability, security, and documentation to determine if controls and processes are adequate.
Reviews and evaluates the adequacy and efficiency of computer applications, hardware, software, and network controls.
Reviews and evaluates proposed and pre-implementation applications to provide input into the design of new systems and their controls.
Develops issues and recommendations for bringing applications and operations into compliance with industry and company standards and objectives.
Coordinates with external auditors and Council Auditors, and follows-up on IT recommendations from their audits.
Performs special reviews at the request of the Audit Director or SLT members.
Conducts internal audits from start to finish, inclusive of planning, fieldwork/testing, report writing, and following up on recommendations and action plans.
Interacts independently with auditees at all levels from the Senior Leadership Team to rank and file employees.
Identifies issues raised in audits and special projects, and communicates them verbally and in written reports, offering recommended control enhancements relevant to the business and risk level.
May serve as a lead auditor identifying roles/responsibilities/expectations of the audit team.
Reviews work performed by team members.
Develops audit programs and testing procedures relevant to risk and test objectives.
Ensures audit conclusions are well-documented and based on a complete understanding of the process, circumstances, and risk.
Establishes and maintains effective working relationships with auditees, in particular, IT management.
Ensures audits address JEA corporate strategies with regard to IT functions.
Ensures adequate focus on personal professional growth, seeking relevant training opportunities to maintain expertise levels and retain active CISA certification.
Ensures effective coordination within Audit Services and the Compliance Department, particularly with respect to cyber security.
Provides leadership and example in meeting JEA ms safety and wellness goals.
Performs other job-related duties as assigned.

Benefits

JEA offers a generous benefits and compensation package, with most benefits starting on your first day of employment .
Paid Time Off: 13 paid holidays plus an exceptional annual leave benefit to be used for vacation, personal and sick time.
Medical: Three comprehensive medical plans offered as options for you and your dependents–including one plan with 100% paid coverage for the employee.
Other Benefits: Exceptional benefits package beginning from first day of employment.
Dental
Vision
Health accounts – employer sponsored HSA and HRA
Flexible spending accounts
Tuition reimbursement
Life insurance, accidental death & dismemberment, short-term and long-term disability and more.
Retirement: JEA provides a great benefits and retirement package for its employees.
Employees may begin participation in the 457 Deferred Compensation Plan on day one of employment.
Employees have the flexibility to choose from a variety of investment options to help them achieve their retirement goals.
Health & Wellness To encourage our employees to develop and maintain good health, JEA offers access to the Healthy Lifestyles Wellness program as well as 11 onsite fitness centers.
From annual flu shots and biometric screenings to health risk assessments and periodic access to an on-site mobile mammography unit, the program offers something for everyone.