Sr IT Auditor (Memphis, TN or Remote in USA)

ALSAC•Memphis, TN

13d

About The Position

The Sr. IT Auditor assists Internal Audit Management in enhancing and protecting organizational value through risk-based, objective assurance, advice, and insight. Under general supervision, the role performs increasingly complex IT audit assignments and works collaboratively with internal IT business partners using a consultative and coaching approach to evaluate and improve IT-related controls, processes, and activities.

Requirements

Bachelor’s degree in Accounting, Information Systems, or equivalent; alternatively, an associate’s degree in one of these fields or equivalent, with at least five years of relevant experience and an applicable certification.
Certified Information Systems Auditor (CISA), required or to be obtained within two years in the position; the posting also lists an applicable certification such as CISSP or CISA for the associate-degree alternative.
At least three years of experience in IT internal auditing; alternatively, at least five years of experience in IT internal auditing, Information Systems, or Information Security with an associate’s degree and applicable certification.

Nice To Haves

Master’s degree in Accounting, Information Systems, or equivalent.
Additional certifications such as CIA, CPA, or CFE.
Experience with audit management software such as AuditBoard, data analytics, and visualization tools.
Working knowledge of the COBIT Framework, GAIT Principles, COSO Internal Control Integrated Framework, ISO 27000 series, NIST, PCI DSS, or NACHA.
Knowledge of the nonprofit industry, including ALSAC and St. Jude Children’s Research Hospital.
Knowledge of systems used at ALSAC and St. Jude Children’s Research Hospital.
Proficient understanding of internal auditing concepts, approaches, tools, and techniques; IT general controls such as security, change management, disaster recovery and backup, and infrastructure; Agile methodologies; cybersecurity and cloud; network architecture; IT governance processes; and IT risk management and assessment processes.

Responsibilities

Initiate audit planning, coordinate information-gathering meetings, and research assigned IT audit projects.
Propose an IT audit plan—including the audit approach, objectives, audit programs, and test plans—for approval by the IT Audit Manager.
Perform audits on time and in accordance with standards promulgated by the Institute of Internal Auditors, and plan and perform audit follow-up activities.
Conduct test work under the direction of the IT Audit Manager, documenting and concluding on work performed.
Analyze processes, risks, and controls; document work using narratives, flowcharts, and risk control matrices.
Draft formal audit reports with sufficient clarity and conciseness, ensuring grammatical and spelling accuracy.
Draft presentations for the Board Audit Committee, management teams, and other committees as requested.
Communicate clearly and effectively with the IT Audit Manager and audit clients throughout projects.
Develop recommendations for identified issues and present those recommendations to audit clients.
Document work performed and identify weaknesses and issues.
Research business and control best practices and apply them in audits when appropriate.
Maintain a very high level of confidentiality.
Develop and maintain productive client and staff relationships, using communication, collaboration, conflict resolution, and negotiation skills as appropriate.