Information Technology Internal Auditor

Auditor

IS Auditor BCP , Change management , Access management .CISA or ISO270001

Job Description:

• The Internal Auditor performs audit projects in accordance with ESFB audit methodology and The Institute of Internal Auditors’ (“IIA”) International Standards for the Professional Practice of Internal Auditing.  The Internal Auditor-Information Technology focuses on audit projects that involve cyber/data security, computer operations, and IT compliance.
• The Internal Auditor effectively executes a wide range of Internal Audit activities in a high quality and timely manner.  In their role, they perform activities that include planning and developing work programs, identifying recommendations for continuous improvement in IT processes and controls, communicating results, and following up on issues reported.  They are also responsible for audit strategy development, organization risk assessment/planning, and completion of special requests from Management and the Audit Committee.

Key Responsibilities

Depending on the role/organization the Internal Auditor-Information Technology belongs to and their career level, some or all of the following key responsibilities will apply:

• Participates in the detailed execution and communication of the risk-based work plan, including Management and Audit Committee special project requests.
• Verifies the adequacy of information technology (IT) operating procedures of the company through a systemic program of audits.
• Assists in development of the Banks annual audit plan and schedule.
• Manages audit work, including audit work plan, work papers, findings, and associated reports.
• Prepares and oversees the preparation of audit reports and work papers to ensure adequate documentation exists to support the completed audit and conclusions.
• Conducts IT integrated audits with operational, compliance, financial, and investigative audit teams, as assigned.
• Manages cyber/data security, IT operations, IT service delivery, and compliance audits, as assigned on a wide-ranging scope of audits with an emphasis on assessing emerging areas of risk including cyber security, artificial intelligence, cloud computing, robotic process automation, and the Internet of Things
• Identifies, recommends, and reports improvement opportunities for global processes and controls.
• As appropriate, identifies opportunities for continuous improvement of technology, security, financial, and other processes and evaluation of organization-driven risk.
• Manages audit relationship, including facilitating meetings, discussions of findings, and presenting draft and final reports in a professional manner.
• Prepares well-written and timely audit reports and high quality presentations for leadership and board level reporting.
• Contribute to various training programs for the audit teams

Basic Qualifications:

• Bachelor´s Degree (Undergraduate degree in Computer Science/ Electronics/ IT Engineering, Information Systems, Business Administration)
• Certifications on Auditing and Information Security Domains (i.e. CIA, CISA, CISSP, CCSK)
• Understanding of industry standards including ISO27001, ISO 20K, NIST 800-53, PCI DSS, HIPAA, GDPR
• A total of 8 years’ experience in information technology with minimum 4 years of auditing, combined audit/IT audit, or relevant information security or information technology roles.

Preferred Qualifications:

• Big 4 experience
• Experience working in a global Internal Audit function
• Cyber security experience
• Strong working knowledge of operational, compliance and IT auditing techniques
• Familiarity with COSO/COBIT framework, ISO 27001 standard

Professional Skills:

• Excellent verbal and written communication skills; interpersonal and presentation skills
• Proven management and organizational skills
• Ability to train, develop, and motivate team members