Senior IT Auditor

Brown Advisory•Baltimore, MD

50d•$90,000 - $148,000•Onsite

About The Position

Brown Advisory is currently seeking a Senior IT Auditor to join the firm's Internal Audit Team. As a Senior IT Auditor, you will assist in conducting risk-based audits, and advisory/consulting engagements across the investment management business, with a focus on technology-related processes. The successful candidate possess energy to learn, exhibit critical thinking, and is highly collaborative.

Requirements

Bachelor's degree in computer systems, information technology, or other areas of study required; CISA, CISSP a plus
Three (3) to five (5) years of relevant IT internal audit experience in financial services. Experience in the investment management industry a plus
Proven experience in performing audits of complex IT systems, Infrastructure and Information security (IS)
Possesses fundamental knowledge of operating system and database platforms (e.g., Active Directory, Windows, Linux, SQL, etc.)
Demonstrated understanding of IT control frameworks such as COBIT, NIST, and ISO 27001
Independent, highly organized and self-motivated with the ability to work in a cross-functional, fast-paced environment
Proficiency in Microsoft Office Suite
Proficiency in use of audit management software and data analysis tools a plus
Experience with APX, Salesforce and/or Charles River a plus
Demonstrated ability to organize, manage and prioritize multiple projects
Detail-oriented, ability to perform well under pressure and solid business judgement
Strong communication skills (verbal and written)
Ability to work in the Baltimore Office five days a week
Applicants must be authorized to work in the United States without the need for current or future employer-sponsored work authorization (e.g., H-1B , O-1, F-1 (OPT), TN, or any other non-immigrant visa classifications that require employer support or sponsorship).

Responsibilities

Execute relevant audit procedures/testing to verify the effectiveness of information technology (IT)/information security (IS) related controls. Document auditee processes and procedures, review and analyze evidence, and identify potential issues
Identify risks and controls, to include development of risk-based test procedures
Prepare clear, organized, and complete documentation to support work performed, including draft findings
Communicate issues, risks and recommendations to business colleagues
Perform follow-up procedures to determine the implementation of recommendations, and assess the adequacy of corrective actions
Track open audit recommendations, and analysis of incident reports and errors
Establish and maintain good client and team relations during engagements