IT Auditor (In-Office)

• Understand information technology (IT) related risks to assess IT General Controls (ITGCs) around user access security, passwords, change management, data migration, network security, physical security, backup and recovery, and third-party vendor evaluation.
• Execute annual IT audit plan to assess the design and operating effectiveness of ITGCs across multiple applications, databases, and operating systems in a highly complex environment.
• Evaluate the design and operating effectiveness of IT Automated Controls (ITACs) used in the performance of accounting and operational processes.
• Evaluate design, operating effectiveness, and completeness and accuracy of Corporate Reports used in the performance of accounting and operational processes.
• Assess user access security within all layers of core systems (application, database, operating system). Partner with system and process owners to design and achieve proper segregation of duties (SOD) for all users.
• Partner with internal stakeholders to identify and address risk and improve operational efficiencies across various system implementations, integrated internal audits (operational, compliance, financial), and related assurance activities as needed.
• Coordinate with external auditors as needed, including gathering and providing necessary control and audit documentation required by external auditors.
• Perform audits independently while keeping Audit Management informed of the status of audits in progress, obstacles, and significant audit findings as they arise.
• Perform audit planning activities such as the development of risk and control matrices, data analytics within key processes under audit, drafting of key communications to audit stakeholders, and preparation of document request lists.
• Execute fieldwork by performing audit testing through inquiry, data analytics, observation, and re-performance and documenting results in working papers.
• Prioritize audit procedures by thinking strategically and understanding business processes within the broader context of the Company operations.

• Bachelor's degree in Accounting, Finance, or Information Systems.
• Prior public accounting experience preferred.
• 2-3 years of IT audit experience with increasing responsibility.
• Demonstrated experience executing IT internal audits in a complex operational and regulatory environment.
• Demonstrated track record of success in delivering projects/audits.
• Experience with spreadsheets, databases, Tableau, Power BI, Snowflake, SAS, or other data/analytical tools.
• Basic understanding of risks and internal controls and the ability to evaluate and figure out the adequacy and effectiveness of controls.
• High proficiency with Microsoft Excel, Word, Outlook, and PowerPoint. Knowledge of Windows Operating Systems and databases.

• Possess and maintain a current, valid driver's license in state of residence and demonstrate safe and responsible operation of motor vehicles.
• CPA (or other accounting certificate), CIA, CISA, CISSP, or other relevant professional certifications preferred or, at a minimum, willing to pursue relevant professional certifications.
• Knowledge of the Standards for the Professional Practice of Internal Auditing and the Code of Ethics developed by the Institute of Internal Auditors.
• Knowledge of regulatory environments such as PCI-DSS and HIPAA, as well as AICPA SOC Trust Service Principles.
• Knowledge of IT General Controls.
• Strong verbal, written, and interpersonal communication and process documentation skills with a shown ability to articulate effectively.
• Excellent analytical skills, including the ability to anticipate issues and to design appropriate solutions.
• Excellent organizational skills.
• Demonstrated ability to navigate complex organizations with creative problem-solving.
• Ability to maintain a high level of confidentiality and integrity is required.
• Ability to speak persuasively and defend complex positions effectively with process owners and management.
• Ability to work well in a fast-paced, high-pressure environment, work independently, and handle multiple projects simultaneously.
• Ability to work as a team player, be self-motivated, and manage multiple deadlines.
• Ability to assess a situation and perform adequate tests to gain assurance on the reliability of the process.
• Possess a high degree of integrity, be trustworthy, and be able to work independently
• Willingness to 'roll up your sleeves" and assist with additional projects and strategic initiatives.

EPB