Senior IT Auditor
- Midtown, Manhattan, NY
- Permanent
- Full-time
Reports to: Senior Director, Internal Audit
Location: Midtown Manhattan, NY (local or within drivable distance only)
--on site 4 days a week -one day remote
--need someone with a good stable background
--good interpersonal skills
--ability to interact with IT managers
--need someone with SOX experience
--need someone with apparel experienceThe Senior IT Auditor is responsible for assessing and evaluating the effectiveness of the company's IT controls, cybersecurity, and compliance with regulatory requirements. This role plays a critical part in identifying risks, recommending improvements, and ensuring the integrity and security of the company's IT systems. The Senior IT Auditor will collaborate with various business units, IT teams, and external auditors to support a strong risk management and control environment.
Responsibilities:
- Supports the scoping and risk assessment analysis of SOX audit planning.
- Leads SOX end-to-end walk-throughs of each in-scope process/application, including assessment of control design and system functionality.
- Executes testing procedures to evaluate the design and operating effectiveness of controls, principally IT General and Automated application controls, key report, SDLC, and Cybersecurity testing.
- Documents accurate, logical, and detailed work papers that effectively describe the audit objective, control testing procedures and results, and conclusions reached.
- Collaborates with IT team in developing control design and standard operating procedures to support internal controls documentation.
- Supports project management activities throughout all phases of SOX work which will include monitoring project plans and assigned areas, tracking engagement progress and reporting to managers. Updates the risk control matrix to maintain relevant documentation for the audit plan.
- Supports IT Systems deployments, upgrades and significant enhancements, risk assessing applications and collaborating on controls design and standard operating procedure development and implementation.
- Takes ownership of individual assignments, delivering high quality and timely audit work papers.
- Establishes and maintains excellent relationships within the team, co-sourced audit team, with business and technology stakeholders, and with external auditors.
- Proposes best practices and process improvements throughout the organization to improve audit requirements. Effects desired change throughout the organization.
- Ability to work independently with minimal supervision, while also effectively collaborating with team members to achieve audit objectives.
- Demonstrate experience and knowledge of IT general controls design and testing procedures, including testing of access management, change management, IT operations.
- Demonstrate experience and knowledge of IT Automated controls testing procedures, including testing of automatic system calculations, systems thresholds, workflows, testing system interfaces and other configurations, positive and negative scenario testing and concepts for baselining/benchmarking requirements and documentation support requirements.
- Demonstrate experience and knowledge of key report testing procedures, including identification of required data elements and analysis, concepts of standard and customized report testing, and analysis of completeness and accuracy in report testing and documentation support requirements.
- Demonstrate experience and knowledge of SDLC, Cybersecurity, SOC report analysis and other key IT control responsibilities.
- Understanding of US GAAP, Sarbanes-Oxley, COSO framework and leading business practices.
- Strong organizational skills, including the ability to multi-task and prioritize various work streams simultaneously.
- Attention to detail and quality in documentation and communication.
- Ability to thrive in a dynamic, fast-paced environment with tolerance for uncertainty, and ability to be agile and adaptable to changes and capacity to manage multiple projects effectively.
- Advanced tools proficiency, including Microsoft Teams, SharePoint, Microsoft Office applications and Google Work Suite (docs, Sheets, etc.).
- Excellent interpersonal skills, with the ability to communicate effectively across various levels of the company.
- High standard of ethics and professionalism.
- Travel domestically and internationally, as required (less than 20%).
The ideal candidate would have:
- Bachelor's or advanced degree in accounting, finance, information systems, or related field.
- 6+ years experience in public accounting or public company Internal Audit, including working with cross-functional IT teams in implementing the right set of Audit documentation and controls; socializing internal controls into the operating environment.
- Experience with JDEdwards Financials, MS Office, Teams, SharePoint, Google Work Suite (Docs, Sheets, Etc.). AS400 experience is desired.
- CISA, CPA, CIA, or other relevant designation preferred.