Senior IT Internal Auditor

Cleveland-Cliffs

3d•$80,000 - $115,000•Onsite

About The Position

Cleveland-Cliffs is seeking a Senior IT Internal Auditor for our corporate headquarters located in Cleveland, OH. This role executes IT audits whose results help the business manage strategic risks, improve or develop efficient and effective processes, identify and communicate best practices, and foster appropriate control levels for IT, business, and financial risks.

Requirements

Bachelor's in Information Technology, Information Systems, Business Administration, or related field.
3+ years of related experience
Ability to work in a highly complex environment under general direction as to assignment
Ability to solve conflicts between differing priorities of various process stakeholders by offering pragmatic solutions to management
Ability to maintain the highest level of ethics, integrity, and objectivity
Ability to travel up to 30% to Cleveland-Cliffs locations as required

Nice To Haves

5+ years of experience in IT audit, internal audit, public accounting, cybersecurity, IT risk management, or related disciplines.
Excellent written and oral communication skills, strong organizational and analytical skills, and project management experience
Comprehensive knowledge of the Sarbanes-Oxley Act provisions and methodologies for achieving compliance
Understanding of both Control Objectives for Information and Related Technology (COBIT) and general auditing (GAAS) principles
Strong interpersonal skills – ability to work closely with people at all levels of the organization
Proactive – demonstrated ability and desire to improve individual performance and advance the efficiency and effectiveness of the department
Understanding of emerging technology risks, including artificial intelligence (AI), machine learning, automation, and data governance concepts, with the ability to assess related risks and controls.
Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), or equivalent certification preferred.
Standing membership in the Information Systems Audit and Control Association (ISACA) is preferred.
Experience utilizing data analytics, automation, robotic process automation (RPA), AI-enabled audit tools, and continuous auditing techniques is preferred.

Responsibilities

Participate in the annual SOX risk assessment, mapping IT assets and technologies to key financial processes and controls.
Support the design and execution of tests of controls, including reviewing other team members' testing, to evaluate the operating effectiveness of IT General Controls within SOX scope.
Foster a team-oriented environment and provide leadership for junior team members.
Evaluate and document process, system, and control effectiveness by applying information technology, auditing, and business knowledge; collect, analyze, and document information to support audit results.
Partner with management to identify constructive, value-added solutions to address identified issues. Recommend operational improvements that ensure that proper controls are exercised over all aspects of the information systems and that company assets are conserved, protected, and accurately presented.
Assess the overall significance of the control deficiencies identified during the audit. Provide perspective for evaluating the audit deficiencies against evolving industry best practices.
Monitor status of action plans arising from audits.
Coordinate/complete special requests, projects, and reports as directed by Internal Audit Management.
Maintain the confidentiality of audit findings and Company proprietary information.
Develop and maintain effective working relationships with Internal Audit’s stakeholders.
Conduct work in accordance with the Standards for the Professional Practice of Internal Auditing and Code of Ethics promulgated by the Institute of Internal Auditors.
Participate in the continuous improvement of the Internal Audit Department, including providing training and feedback related to audit activities.
Support company-wide initiatives, such as sustainability practices, enterprise risk management programs, and other projects at the Company.
Design and execute non-SOX IT audits in areas of cyber security, data governance, and cloud security, amongst others.
Assess risks and controls related to emerging technologies, including artificial intelligence (AI), machine learning, automation, and advanced analytics. Evaluate governance processes, data management practices, and compliance with Company policies regarding AI usage.