[Hiring] Sr IT Auditor @ALSAC

Role Description

The Sr. IT Auditor will assist Internal Audit Management in performing their duties of enhancing and protecting organizational value by providing risk-based and objective assurance, advice, and insight. Under general supervision, performs increasing complex IT audit assignments. Work collaboratively with Internal IT business partners in a consultative / coaching approach to evaluate and improve IT related controls, processes, and activities.

• Initiates the planning process, coordinates information gathering meetings, and performs research for the related IT audit projects.
• Proposes an IT audit plan (audit approach, audit objectives, and audit programs, including test plans) for approval by the IT Audit Manager.
• Performs audits on time and in conformance with auditing standards promulgated by the Institute of Internal Auditors. Plans and performs audit follow up activities.
• Under the direction of the IT Audit Manager, conducts test work and clearly documents and concludes on work performed.
• Analyzes processes, risks, and controls. Documents work using narratives, flowcharts, and risk control matrices.
• Drafts formal audit reports assuring sufficient clarity, conciseness, and grammatical and spelling accuracy.
• Drafts presentations to the Board Audit Committee, management teams, and various committee members as requested.
• Facilitates clear and effective communications with the IT Audit Manager and audit clients throughout the project.
• Develops recommendations to address issues detected and sells recommendations to the audit client.
• Clearly documents work performed and identifies weaknesses/issues.
• Proactively researches business and control best practice concepts in order to apply in an audit as appropriate.
• Maintains a very high level of confidentiality.
• Develops and maintains productive client and staff relationships, which may include communication, collaboration, conflict resolution, and negotiation skills.

Qualifications

• Bachelor’s degree in Accounting, Information Systems, or equivalent.
• Certified Information Systems Auditor required or must obtain within 2 years in the position.
• 3+ years of experience in IT internal auditing or Associate’s degree in Accounting, Information Systems, or equivalent, 5+ years of experience in IT internal auditing, Information Systems or Information Security, and an applicable certification (CISSP, CISA, etc.).

Requirements

• Master’s degree in Accounting, Information Systems, or equivalent (preferred).
• Additional certifications such as CIA, CPA, or CFE (preferred).
• Experience with audit management software (Auditboard), data analytics, and visualizations tools (preferred).
• Working knowledge of the COBIT Framework, GAIT Principles, and/or COSO Internal Control Integrated Framework, ISO 27000 series, NIST, PCI DSS, NACHA (preferred).
• Knowledge of non-profit industry including ALSAC/St. Jude Children’s Research Hospital (preferred).
• Knowledge of systems used at ALSAC/St. Jude Children’s Research Hospital (preferred).
• Proficient understanding of internal auditing concepts, approaches, tools and techniques, IT general controls (e.g., security, change management, disaster recovery & backup, infrastructure, etc.); Agile methodologies, cybersecurity, and cloud; network architecture; IT governance processes; IT risk management and assessment processes (preferred).

Benefits

• Core Medical Coverage: (low cost low deductible Medical, Dental, and Vision Insurance plans)
• 401K Retirement Plan with 7% Employer Contribution
• Exceptional Paid Time Off
• Maternity / Paternity Leave
• Infertility Treatment Program
• Adoption Assistance
• Education Assistance
• Enterprise Learning and Development
• And more