[Hiring] Associate IT Auditor @FERGUSON

Role Description

The Associate IT Auditor reports to the IT Audit Manager and supports the audit team by performing design and operating effectiveness testing for Sarbanes Oxley IT General Controls (ITGC) with oversight from senior auditors and IT Audit management. This role is responsible for preparing thorough work-papers with supporting evidence, incorporating feedback for continuous improvement, and clearly communicating testing status and findings.

The Associate IT Auditor conducts ITGC walkthroughs with control owners, participates in a variety of IT audits—including reviews of:

• ITGC on acquisitions
• Information security
• Cybersecurity
• System implementations

Additional duties include:

• Drafting and communicating control deficiencies with root cause analysis
• Ensuring all documentation is accurately tracked in AuditBoard
• Supporting special projects
• Pursuing ongoing learning
• Attending required trainings and team meetings

Location and Travel

• This role is approved to be fully remote and can be based anywhere in the United States.
• This role can also be hybrid out of Ferguson's corporate offices in Newport News, VA, according to Ferguson policy.
• Must be available to work East Coast hours.
• Travel 10-35%, including Canada; for remote staff, travel to Newport News HQ at minimum annually in addition to audit location travel.

Responsibilities

• Integrates the IPPF components into audit engagements to ensure conformance with mandatory requirements and leading practices.
• Develops and drives the audit program, communicates engagement objectives and scope to partners, documents process walkthroughs and flowcharts, develops analytical procedures and sample-based testing, and gathers evidence to support conclusions.
• Assists with writing engagement findings into a draft report and presenting audit findings to management.
• Leads portions of an audit engagement, facilitating discussions with management on risk mitigation efforts and the feasibility of process improvements.
• Recognizes the role of the internal audit function in fraud risk management, prevention, and detection; assists in identifying fraud risk indicators and gathering relevant information for analysis.
• Enhances risk coverage and efficiency by identifying overlapping assurance efforts.

Skills and Expectations

• Demonstrates a fundamental understanding of cybersecurity objectives, systems development lifecycle and project implementation guidelines, governance related to confidentiality, data integrity, and system availability.
• Familiarity with compliance/audit frameworks (NIST, COBIT, etc).
• Knowledge of technical platforms, networks, security concepts and data retrieval techniques.
• Demonstrates a basic understanding of basic business functions such as revenue, expenses, cash, receivables, payables, inventory, and other processes specific to distribution organizations.
• Assists in gathering IT policies, system documentation, and IT control assessments under supervision.
• Demonstrates a fundamental understanding of ITGCs according to PCAOB standards.
• Applies ethical principles in audit work, ensuring impartiality and adherence to professional responsibilities.
• Executes audit work in conformance with the Standards and expectations established within the quality assurance and improvement program (QAIP).
• Understands principles of effective communication in internal auditing, including clarity, conciseness, and objectivity.
• Demonstrates conflict management skills as vital when resolving timing and engagement scope discussions with partners.
• Understands basic data analysis concepts, including data integrity, completeness, and accuracy in an internal auditing context.
• Demonstrates strong project management and time management skills to ensure engagement objectives are achieved and deadlines are met.
• Proactively takes initiative and ownership in achieving assigned objectives.
• Demonstrates well-developed problem solving, critical thinking, and analytical skills.
• Team player, collaborative and exhibits flexibility to adapt to changing priorities.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, or related area; Advanced degree is a plus.
• 6 months to 2+ years proven work experience and knowledge in IT Audit and/or related activities in IT.
• Experience with the Microsoft Office Suite including PowerBI and Visio; knowledge of Workday, AuditBoard, Oracle, Sage X3 a plus.
• Familiarity with compliance/audit frameworks (NIST, COBIT, etc).
• Knowledge of technical platforms, networks, security concepts and data retrieval techniques.
• Experience working in a remote environment a plus.
• A professional certification is required within one year from hire date. Other certifications not listed below will be considered for applicability:
• Certified Information Systems Auditor (CISA)
• Certified Internal Auditor (CIA)
• Certified Public Accountant (CPA)
• Certified Fraud Examiner (CFE)

Benefits

• Health, dental, and vision insurance
• Paid time off
• Life insurance
• 401(k) with a company match
• Mental health coverage
• Gender affirming and family building benefits
• Paid parental leave
• Associate discounts
• Community involvement opportunities