Sr. IT Auditor

Valvoline•Lexington, KY

About The Position

The Senior Information Technology (IT) Auditor primarily leads the planning, fieldwork, and reporting phases of technical and process audit projects and Sarbanes-Oxley 404 compliance testing (SOX) in conformance with Internal Audit policies and procedures. The Senior IT Auditor role is responsible for identifying and evaluating key IT, Cybersecurity and Digital risks and controls through direct observation of and interaction with Valvoline IT, Cybersecurity and Digital personnel, processes and technologies. This role will be responsible for managing assigned audit projects, the audit staff assigned to the projects, and the relevant audit client relationships and for developing appropriate audit procedures to evaluate the efficiency and effectiveness of Valvoline's internal control environment, performing and/or overseeing detailed audit testing, cogently communicating issues to management, and making appropriate recommendations for improvement. The Senior IT Auditor is also responsible for ensuring appropriate and timely follow-up on management action plans from published audit reports.

Requirements

Bachelor's degree in computer science, Computer Engineering, Decision Science and Information Systems, Accounting/Management Information Systems or comparable major required.
Minimum of 4 to 6 years of experience in internal or external auditing.
Must possess or be committed to attaining at least one relevant professional certification (CIA, CISA, CRISC, CISSP, etc.).
Sarbanes-Oxley (SOX) Act controls evaluation and testing capabilities required.
Experience with SAP or comparable Enterprise Resource Planning systems required.
Strong verbal and written communication skills.
Excellent problem-solving and analytical skills.
Trusted business partner; earns respect of clients.
Ability to work well in a dynamic, results-driven team environment required.
Individual initiative, project management and multi-tasking skills required.

Nice To Haves

Post-graduate degree (e.g., Master of Science in Technology, Master of Business Administration, etc.) a plus.
Practical experience with data analytics and related tools (SAP Analytics Cloud, Power BI, etc.) preferred.
Subject matter expert (SME) in one or more areas, and proactive at sharing that knowledge preferred.
Experience working and partnering with external auditors preferred.

Responsibilities

Prepare the Risk Assessment, Engagement Program, Work Program, Audit Objectives Memo, Draft Audit Report and perform other project management related activities (as prescribed by Internal Audit’s policies and procedures) for IT audit projects and management requests.
Work with client management to develop practical action plans that are appropriately designed to be successful cost-effective solutions to mitigate associated risks.
Review workpapers to evaluate planning, fieldwork, and testing results to verify that appropriate conclusions are reached about the adequacy of IT controls and the efficiency and effectiveness of IT systems / processes.
Lead the preparation, coordination, and completion of tests of design for IT General Controls (ITGCs) and automated controls that support relevant business processes, in particular related to Sarbanes-Oxley (SOX) and privacy compliance requirements.
Identify relevant test attributes and design appropriate test procedures to conduct / review tests of effectiveness for relevant ITGCs and automated controls, in particular related to Sarbanes-Oxley (SOX) and privacy compliance requirements.
Partner with management and external auditors in the coordination of testing and associated conclusions / results.
Provide technical assessments and risk and control insights for critical applications and IT processes during new system / process implementations.
Monitor audit client follow-up activities in accordance with timelines stated in final audit reports and proactively keep management apprised of progress.
Provide technical support to the Internal Audit Department for enabling systems / applications / tools.