Senior IT Auditor

Chili's•Coppell, TX

10d•Hybrid

About The Position

The Sr. IT Auditor conducts IT audit assignments evaluating the risks and internal control effectiveness of Company’s IT environment. The role is responsible for annual IT SOX (general IT and application controls) and risk-based audit testing. Position offers a rare, balanced mix of compliance and non-compliance projects that provides for a broad IT auditing experience. Non-compliance work driven by periodic IT risk assessments, annual ERM process, and management-requested efforts to ensure projects are relevant and providing value. This role sits in Internal Audit and does not have direct reports.

Requirements

Bachelor’s degree in Information Technology, Computer Engineering, or a related field; a concentration or coursework in Computer Science is preferred.
Minimum 2-4 years of IT experience, including minimum of two years of IT control consulting / assessment experience.
Possess strong IT audit experience and knowledge in the areas of technology infrastructure, information security, and cloud environments: Infrastructure (Windows, Linux), Database Architecture (SQL Server, Oracle), SaaS (Oracle), Network Devices, and Active Directory.
Experienced in SOX General IT Controls testing.

Nice To Haves

Experience in cybersecurity, information security, and PCI DSS compliance testing is preferred, but not required.

Responsibilities

Understands and evaluates the internal control and risk environment. Conducts complex engagements that are designed to assess the organization’s information technology (IT) risk exposure and recommends any needed enhancements to IT business systems, processes, and controls.
Supports the Internal Audit department by participating in a variety of projects. Projects may include, but are not limited to, risk-based audits, risk assessments, managed-requested projects covering cybersecurity, data privacy, information security, third party risks, Payment Card Industry Data Security Standard (PCI DSS), IT operations and system configuration.
Performs all activities related to Sarbanes-Oxley Section 404 (SOX) including: risk assessment, scoping, requirement/control documentation, testing of design and operating effectiveness, remediation consulting and testing, project management/status tracking and reporting.
Initiates and maintains effective relationships with management and process owners and identifies significant risks and related controls within their business. Seeks to increase customer satisfaction while challenging the status quo and enhancing the Company’s control environment.
Acts with a sense of urgency regarding project timelines and risk mitigation. Ensures closure of issues while considering a broader understanding of Company strategy. Grasps complexities, perceives relationships among projects, and includes others in problem-solving efforts. Creates an atmosphere in which timely and high-quality information flows smoothly between self and others.