Global IT Audit & Assurance Manager

The Area:

Morningstar is a leading global provider of independent investment insights.  Our core competencies are data, research, and design, and we employ each of these to create products that clearly convey complex investment information. Our mission is to empower investor success and everything we do at Morningstar is in the service of the investor.

Reporting to the Audit Committee of the Board of Directors, the purpose of the Global Audit and Assurance (GAA) function is to strengthen Morningstar’s ability to create, protect, and sustain value by providing the Company with organizationally independent, risk-based, and objective assurance and consulting services to evaluate and improve Morningstar’s governance, risk management and control processes.

The Role:

Morningstar is looking for a Global IT Audit & Assurance Manager to play a critical role in the Global function. This dynamic position offers an exciting opportunity to lead a focused team of experienced IT auditors and manage a variety of projects, including risk assessment, audit engagements, advisory reviews, and special projects aimed at enhancing risk management, control, and governance. The role reports to the Audit Director and will be a key member of the Global Audit & Assurance leadership team. This is a full-time position and is based in Morningstar’s Chicago office.

Key Responsibilities:

• Lead developing, scheduling, and executing the risk-based IT annual internal audit (IA) plan that addresses the relevant and evolving IT risks facing the company.
• Contribute to the continuous improvement of the overall IA methodology to ensure adherence to best practices.
• Prepare and/or review the IT & Integrated audit planning documents, audit programs, and supporting work papers.
• Lead the preparation of audit reports ensuring that all significant risk and internal control weaknesses are identified and that effective recommendations to address deficiencies are provided.
• Monitor the status of management corrective action plans and follow up as appropriate.
• Assist in managing the department’s Quality Assurance and Improvement Program and external quality review.
• Provide guidance to management on internal control, governance, risk, and compliance activities.
• Promote high levels of ethical awareness and conduct and assist in the performance of investigations when appropriate. 
• Implement data analytics and automation initiatives within internal audit activities to enhance efficiencies and increase audit effectiveness. 
• Manage a professional audit team with sufficient knowledge, skills, expertise, and professional certification to meet the audit requirements.
• Ensure the professional development of the team through coaching and internal and external training.
• Assist in preparing reports to the audit committee.
• Coordinate with the Company’s external audit firm and cultivate external relationships.
• Partner with the SOX program to ensure key controls are tested in alignment with the audit plan.
• Perform other related duties as assigned.

Requirements

• A bachelor’s degree or equivalent in Information Technology, Management Information systems, Accounting or Finance is required.  A master’s degree is a plus.
• Relevant certification (e.g. CISA, CIA, CPA) is required.
• Minimum of 9 years of progressive industry or public accounting experience (preferably with the Big 4 or national CPA firm and/or similar experience in corporate Internal Audit).
• Exceptional understanding of information technology general computer controls, system development life cycle, and IT auditing techniques; including a broad knowledge of IT technologies, operating systems, databases, and application platforms.
• Excellent demonstrated knowledge of recognized IT audit and governance frameworks such as COBIT, ITIL, NIST, ISO, etc.
• Knowledge of General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).
• Strong experience managing IT audits and advisory engagements related to Risk Management, Governance, and controls.
• Strong understanding of COSO and GAAP.
• Strong knowledge of cybersecurity principles and practices
• Robust experience performing data analytics and driving automation to realize efficiencies (preferably using tools such as Alteryx, Tableau, Power BI, UI Path, Automation Anywhere).
• Experience with electronic work paper tools (TeamMate+, Workiva etc.) desired.
• Proven ability to effectively manage several projects in multiple locations and manage time and the team effectively.  
• Exceptional oral and written communication skills and the ability to write clear and concise audit reports.
• Proven abi