IT Senior Auditor

About This Role

The IT Application Senior Auditor will be a key member of the Sarbanes-Oxley (SOX) Audit team, participating in the evaluation of IT application controls. This role assesses the design and operating effectiveness of ITACs across business segments, partners with various SOX teams, and assists with annual planning and execution of SOX testing. The position continually evaluates and recommends operational and process improvements to financial compliance processes and the company's key control structure.

Responsibilities

• Assess application controls and security configurations across the Enterprise
• Perform data integrity and system interface reviews
• Review process documentation obtained during walkthroughs and determine the nature, timing, and extent of audit procedures needed
• Work with external auditors and regulatory bodies, as needed
• Execute testing and create work paper documentation
• Interact with various levels of Internal Audit and technology and digital line management to resolve issues in a timely manner and to maintain effective communications
• Demonstrate a commitment to integrity and the company code of conduct, and a respect for diversity and inclusion
• Ensure high-quality work papers: clear test objective, criteria, procedures, evidence, and conclusions
• Develop test plans for ITACs (e.g., configuration parameters, automated 3-way match, approval workflows, tolerance/thresholds, system-enforced segregation, data validations, exception handling)
• Test IPE (Information Produced by the Entity) for IT Automated Key Reports: validate report logic, parameters, source, completeness & accuracy (C&A) and retention
• Evaluate interfaces/integrations (e.g., file transfer completeness, error handling, reconciliation)
• Execute operating effectiveness testing, including sample selection, re-performance, inspection, and inquiry, in accordance with entity methodology

Requirements

• 2+ years prior experience in IT Audit, Automated Controls Assessment, Risk Assessment, or Risk Consulting
• Ability to travel up to 10%
• Must be willing to work 8:00am-5:00pm EDT or CDT

Nice to have:

• Professional designations such as CISA, CPA, CIA, etc., or measured progress in achieving such designations
• Base-level understanding of IT related application controls, related technologies and deployment strategies and how automated business controls function within these technologies and in broader business processes
• Understanding of cloud environments and data classification and protection concepts
• Understanding of key IT concepts and processes - including applications and infrastructure, change control, access management, job scheduling, data privacy, and IT risk assessment, automated control environments, cybersecurity best practices, Cloud security controls etc.