Sr. Auditor

SpartanNash•Grand Rapids, MI

2d•Onsite

About The Position

The Sr. Auditor documents business processes to identify and evaluate risks, develops audit programs for efficient testing of key controls, executes audit testing, identifies improvement opportunities, and develops action plans to mitigate risks. The role assesses internal control design and operating effectiveness, performs complex audit and IT risk reviews, documents findings, and works with management and business areas on corrective actions and process improvements. It also requires maintaining knowledge of relevant regulations, industry trends, and accounting and auditing practices.

Requirements

Bachelor’s degree in Accounting, Finance, Computer Science, or an equivalent combination of education and/or experience.
Five years of financial accounting and/or operational auditing experience.
Advanced knowledge of auditing and fraud investigations.
Advanced understanding of operational, financial, and regulatory risks and risk mitigation.
Thorough understanding of SOX compliance.
Strong oral and written communication and presentation skills.
Strong interpersonal skills and ability to collaborate across the organization.
Strong organizational, analytical, and problem-solving skills, with the ability to multitask and prioritize.
Ability to work flexible hours as needed to meet deadlines.
Proficiency in Microsoft Word, Excel, and PowerPoint.
Ability to travel up to 25%, including overnight, to company locations.
For auditors working in IT Operations: strong knowledge of IT general controls and application controls, and working knowledge of COBIT, NIST, COSO, or other leading IT security frameworks.

Nice To Haves

Financial accounting or operational auditing experience in public accounting.
CISA, CISSP, CIA, CPA, and/or CISM certification.

Responsibilities

Document current-state and future-state business processes using flowcharts and narratives.
Evaluate the design and operating effectiveness of internal controls, identify improvement opportunities, and recommend business- and risk-relevant solutions.
Participate in developing audit programs to test key controls efficiently and assess operational risks.
Conduct interviews and research to understand audited business units and process flows.
Provide risk assessment and education to company associates.
Perform complex audit testing to assess the operating effectiveness of key controls and process flows.
Obtain supporting documentation for findings and conclusions and summarize test results in work papers according to department policies and procedures.
Document issues arising from audit testing, present findings to management, develop risk-mitigation action plans, and follow up on corrective actions.
Present complex topics succinctly to all levels of the organization.
Partner with business areas to recommend process, efficiency, and effectiveness improvements and develop leading audit practices.
Maintain knowledge of legal regulations, industry trends, and accounting and audit practices; recommend program and process improvements to support legal compliance.
Perform IT risk assessments by reviewing, documenting, evaluating, and testing general system and application controls, including security, segregation of duties, change management, user access, operations, program development, and infrastructure.
Conduct IT audit reviews of applications, infrastructure, and systems development.
Identify opportunities to improve controls before and after IT system implementations, upgrades, and other change events.
Perform additional responsibilities as assigned.