Sr IT Auditor (Memphis, TN or Remote in USA)

St. Jude Children’s Research Hospital • Memphis, TN

11d

About The Position

The Sr. IT Auditor assists Internal Audit Management in enhancing and protecting organizational value by providing risk-based and objective assurance, advice, and insight. Under general supervision, this role performs increasingly complex IT audit assignments and works collaboratively with internal IT business partners in a consultative and coaching capacity to evaluate and improve IT-related controls, processes, and activities.

The position is based in Memphis, Tennessee, or may be performed remotely within the United States. The Sr. IT Auditor helps plan and carry out audits, analyze processes and controls, document findings, communicate with audit clients and management, and develop recommendations. The role also requires maintaining confidentiality and productive relationships with clients and staff.

Requirements

• Bachelor’s degree in Accounting, Information Systems, or equivalent.
• Certified Information Systems Auditor (CISA) certification, or the ability to obtain it within two years in the position.
• At least 3 years of experience in IT internal auditing; alternatively, an associate degree in Accounting, Information Systems, or equivalent, at least 5 years of experience in IT internal auditing, Information Systems, or Information Security, and an applicable certification such as CISSP or CISA.

Nice To Haves

• Master’s degree in Accounting, Information Systems, or equivalent.
• Additional certifications such as CIA, CPA, or CFE.
• Experience with audit management software such as AuditBoard, data analytics, and visualization tools.
• Working knowledge of the COBIT Framework, GAIT Principles, and/or COSO Internal Control Integrated Framework, ISO 27000 series, NIST, PCI DSS, or NACHA.
• Knowledge of the nonprofit industry, including ALSAC and St. Jude Children’s Research Hospital.
• Knowledge of systems used at ALSAC and St. Jude Children’s Research Hospital.
• Proficient understanding of internal auditing concepts, approaches, tools, and techniques; IT general controls such as security, change management, disaster recovery and backup, and infrastructure; Agile methodologies; cybersecurity and cloud; network architecture; IT governance processes; and IT risk management and assessment processes.

Responsibilities

• Initiate audit planning, coordinate information-gathering meetings, and research related IT audit projects.
• Propose IT audit plans, including the audit approach, objectives, audit programs, and test plans, for approval by the IT Audit Manager.
• Perform audits on time and in accordance with standards promulgated by the Institute of Internal Auditors, and plan and perform audit follow-up activities.
• Conduct test work under the direction of the IT Audit Manager and clearly document and conclude on work performed.
• Analyze processes, risks, and controls; document work using narratives, flowcharts, and risk control matrices.
• Draft formal audit reports with sufficient clarity and conciseness and accurate grammar and spelling.
• Draft presentations for the Board Audit Committee, management teams, and other committees as requested.
• Communicate clearly and effectively with the IT Audit Manager and audit clients throughout each project.
• Develop recommendations to address detected issues and present those recommendations to audit clients.
• Document work performed and identify weaknesses and issues.
• Research business and control best practices and apply them in audits as appropriate.
• Maintain a high level of confidentiality.
• Develop and maintain productive client and staff relationships, using communication, collaboration, conflict resolution, and negotiation skills.

Benefits

• Core medical coverage, including low-cost, low-deductible medical, dental, and vision insurance plans.
• 401(k) retirement plan with a 7% employer contribution.
• Paid time off.
• Maternity and paternity leave.
• Infertility treatment program.
• Adoption assistance.
• Education assistance.
• Enterprise learning and development.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior