Senior Manager, IT Auditing - Remote

Job Title:

Senior Manager, IT Auditing - Remote

Role Overview:

Do you excel at building working partnerships with senior executives and engineers alike in order to ensure the company’s IT processes and audits are compliant and best in class? Do you enjoy a sense of autonomy in order to manage and complete your projects and deliverables on time? The IT Audit Manager position might be what you’ve been looking for!

The IT Audit Senior Manager supports the McAfee Global Internal Audit department in planning and executing information technology audits. You’ll identify and assess the risks to McAfee IT processes and systems, define and execute audit programs, and communicate results to management. Your knowledge of IT processes, systems (e.g., SAP, Workday, Salesforce), IT general controls, and emerging technologies including robotic process automation (RPA), cloud computing, mobile computing, privacy, and cybersecurity will be necessary to do this job well. Your ability to partner with senior leaders as well other levels of the organization will be integral to your success in this role.

This is a remote position based in the US. We will only consider candidates in the US and are not offering relocation assistance at this time.

About the role:
•    Design, plan, lead, and execute Information Technology (IT) audits and reviews of systems, applications, and IT processes. Review workpapers ensuring clear identification and communication of risks, control gaps, deficiencies, etc.
•    Provide strategic and proactive consultation in identifying risk exposures and evaluating solutions for internal control weaknesses. Prepare and report results to executive leadership and Audit Committee

IT Audits include:
•    Evaluate design and operating effectiveness of information technology general controls (ITGC) as part of IPO readiness, should the owners pursue a public exit strategy
•    IT audits covering multiple technical areas: data analytics, cybersecurity, cloud computing, SAP, Workday, Salesforce, mobile technology, application infrastructure, etc.
•    Perform pre and post- implementation reviews of system implementations and enhancements.
•    Perform various reviews of IT management policies and procedures such as change management, business continuity planning/disaster recovery, and information security to ensure that controls surrounding these processes are adequate
•    Responsible for developing and maintaining IT risk assessment and audit plan under the oversight of IA Director
•    Assist IA Director with management of an enterprise risk management program and evaluation of noted risks and risk mitigations as defined by management
•    Assist with development of continuous auditing processes to ensure thorough and timely audits and monitoring of business and IT processes and transactions
•    Drive standardization and optimization of internal control environment
•    Document both process and internal control activities via flowcharts, narratives, etc.
•    Lead internal control deficiency analysis and development of remediation plans (including root cause analysis). Monitor and ensure implementation of agreed-upon controls
•    Design test plans and testing approaches based on risk analysis
•    Understand effective control mitigation options to manage specific risks
•    Assist with special projects as assigned by management
•    Develop and maintain strong and effective relationships with other internal functions including external audit
 
About you:
•    CISA or CRISC certification required. CIA, CPA certifications a plus
•    Big 4 or relevant consulting experience a plus
•    Outstanding interpersonal and communication skills: ability to present clearly and articulate complex technical information to technical and non-technical audiences
•    Comprehensive understanding of internal control environments within the IT Function
•    Experience with a data or audit analytics tool (e.g. CaseWare IDEA or ACL)
•    Ability to produce high quality work products for both the IT Groups and Senior Management.
•    Expert knowledge of core IT general control processes (e.g., Information Security, Change Management, Program Execution, IT Operations, etc.)
•    Understanding of information security standards, best practices for securing computer systems, and applicable laws and regulations (e.g. ISO, SSAE 18, CCPA, GDPR, FedRAMP, PCI, and NIST)
•    Adhere to a high standard of core values and ethics that align with McAfee; maintain high integrity and trust
•    Excellent leadership, project management and teamwork skills
•    Proactive, hands-on, results-driven orientation required
•    Adapt well to change in a fast-paced business environment
•    Strong interpersonal communication skills: you’re able to develop k