Senior Internal Auditor - Information Security Audit

SUMMARY

RESPONSIBILITIES

• Execute SOX IT and information systems testing program, including conducting walkthroughs, understand processes and procedures, policies, analysing audit evidence, executing controls testing, identifying and defining issues or recommendations, effectively communicating and managing stakeholders of audit program and manage the documentation at each step of audit phases.
• Experience in conducting Audits that involve IT Technical areas such as IT Infrastructure controls around network security, business resiliency (BCP/DR), configuration management, AWS/Azure Cloud infrastructure and security controls along with basic Cybersecurity related controls in line with NIST framework.
• Support the creation of status reports and planning materials assist with overall and collaborate closely with internal and external stakeholders for the IT Program. Perform the end-to-end planning, execution, and reporting with the IT Internal Audit Manager of risk-based IT audit engagements across domains such as: Information Security Program Network & System Security Business Continuity and Disaster Recovery (BC/DR) Change Management and Software Development Lifecycle (SDLC) Cloud Security Controls (specifically Azure and AWS) Identity & Access Management (I&AM) IT Operations and Asset Management Privacy and Data Protection Third-Party Risk Management (TPRM)
• Information Security Program
• Network & System Security
• Business Continuity and Disaster Recovery (BC/DR)
• Change Management and Software Development Lifecycle (SDLC)
• Cloud Security Controls (specifically Azure and AWS) Identity & Access Management (I&AM)
• IT Operations and Asset Management
• Privacy and Data Protection
• Third-Party Risk Management (TPRM)
• Evaluate IT risks, control maturity, and alignment with regulatory expectations.
• Provide risk advisory and control consultation to IT and business leadership on strategic technology initiatives, regulatory obligations, and emerging threats.
• Collaborate closely with cross-functional stakeholders, including Accounting, Information Security, Compliance, Legal, and Engineering teams, to understand business processes and evaluate control effectiveness.
• Develop and deliver clear, concise, risk-focused audit reports dealing with complex and sensitive issues, including findings, root cause analysis, and actionable, in a timely manner for internal and external audiences..
• Complete assigned responsibilities following audit standards.
• Partner with internal and external audit teams to ensure a timely and efficient testing approach and issue resolution.
• Monitor and validate the implementation of management action plans and ensure sustainable remediation of control issues.
• Support new system implementations and ensure compliance with existing policies
• Conduct risk assessments, including the identification of controls and testing attributes.
• Contribute to the development and evolution of the IT audit program, including risk assessment methodology, audit universe updates, and use of data analytics.
• Act as a key liaison to internal and external auditors, examiners, and other assurance functions to ensure coordinated risk coverage and alignment.
• Excellent time management and organizational skills , with the ability to support multiple projects, work both independently and collaboratively within the team and effectively prioritize and manage a large volume of work

EDUCATIONAL REQUIREMENT & QUALIFICATION

• Bachelor’s degree with 5-8 years of experience in IT audit, internal audit, cybersecurity, financial services, or a related business function
• 3+ years of direct experience in IT Audit for a SaaS company or equivalent IT audit experience at a top-tier firm (Big 4, RSM, Protiviti, etc.)
• 2+ years of experience leading end-to-end engagements and/or leadership experience within the information technology or security fields.
• Certifications combined with hands on experience in AWS/Azure cloud infrastructure and security.
• Certifications combined with hands on experience in Cybersecurity Auditing against popular frameworks such as NIST CSF.
• Demonstrated knowledge of internal controls, business risks and audit techniques in a large SaaS organization
• Demonstrated knowledge of SOC1 and SOC2 requirements
• Knowledge of data analytics tools such as ACL, Power BI, or Tableau and proficiency in Microsoft Excel, Word, Outlook, used for issue identification and trend monitoring.
• Experience with AuditBoard or other audit engagement support tools
• Maintains other designations including Certified Management Accountant (CMA), Certified Fraud Examiner (CFE), Certified Information Security Systems Professional (CISSP), Certified Financial Services Auditor (CFSA), or other relevant business designation.
• Strong knowledge of internal audit methodologies , including experience leading audit projects in accordance with the Institute of Internal Auditors (IIA) Global Standards.
• Superior interpersonal, written, and verbal communication skills , with the ability to create thorough documentation and interface effectively with individuals at various levels.
• Ability to remain organized, pay strict attention to detail, and meet critical deadlines within a high volume, fast-paced environment.
• This position requires fluent written and oral communication in English.

Health & Wellness

Our Culture & Commitment