Manager, IT Audit

LyondellBasell

Come Join an Inclusive Team:

IT Audit manager, leads complex, risk-based technology and integrated audits across global operations, driving continuous monitoring capabilities and technology risk convergence. Responsible for modernizing audit practices while maintaining audit quality and risk coverage. Partners with the Internal Audit leadership team and IT leadership on emerging technology initiatives, while serving as Internal Audit ambassador for the engineering rotation program. The IT Audit Manager coordinates with various departments throughout the company and at all levels regarding IT and business issues, audit findings, risk management and management action plans. The position collaborates with external auditors to leverage work/resources and minimize duplication, where possible. The position fosters strong morale and team spirit. A key member of the Internal Audit Management team who contributes to and influences decisions to achieve desired results. Position requires overtime during various times of the month/year and on-call availability for critical issues. Up to 20% travel may be required. 
 

A Day In The Life:

• Drive changes in Internal Audit and Company operations that lead to improved risk management, efficiencies, and savings. Identify opportunities to complete audit work more efficiently and apply new audit tools and techniques where needed.
• Represent the department while interfacing with Management and other personnel in the organization regarding accounting and business issues, audit findings, management action plans and operational efficiency. Lead discussions with auditees at various levels and function as a role model for internal audit staff team members (auditors).
• Develop/participate in internal audit risk assessment and risk-based audit plan.
• Manage audits and auditors by providing daily oversight and support and prioritizing issues based on relevance, significance, and impact to the organization. Review and edit documents of others.
• Stay current on developments in the audit profession, industry and within the company and function as a resource for critical subject matter area and/or knowledge of key business processes.
• Assess the management of risk and drive change in the organization, effectively utilize a broad range of tools to support audit work, including data analysis tools, automation, benchmarking, and business research tools. Demonstrate advanced knowledge of SAP modules and extract data and research for analysis.
• Lead teams and foster collaboration and cooperation among members.
• Effectively recruit, coach, train, and mentor auditors to develop skill levels and auditing awareness for promotion within Internal Audit and out into the business. Accountable for the performance management of their appointed team members (direct reports) to ensure goals and objectives are achieved.
   

You Bring this Value:

Experience:

• Typically 10+ years of combined IT audit, technology risk, and/or cybersecurity experience.
• Minimum seven years managing complex IT audit programs.
• Experience with industrial control systems/OT environments.

 

Technology Risk Leadership 

• Lead audits and assessments of emerging technologies.
• Spearhead aligned assurance related efforts.
• Drive continuous control monitoring implementation.
• Provide risk insights for technology investments.
• Oversee IT/OT security audit program.

 

Audit Innovation 

• Implement automated testing strategies.
• Develop data analytics capabilities.
• Establish continuous monitoring frameworks.
• Lead IT audit quality assurance program.
• Champion innovative audit methodologies.

 

Education:

• Bachelor’s degree required. Information systems, engineering, computer science or related field preferred. 
• Master's degree in a relevant field preferred.
• MBA or technical master's is a plus.

 

Required Technical Knowledge:

• IT related governance standards and frameworks (COBIT 2019, NIST, ISO 27001).
• SAP security and controls .
• SOX IT controls and compliance requirements.
• Cloud security and digital transformation
• Data analytics and continuous monitoring.
• IT and operational technology security controls.

 

Preferred Working Knowledge:

• Industrial automation systems.
• Process manufacturing systems.
• Industrial control systems.

 

Technical Skills:
Required:

• Demonstrate advanced IT audit methodologies to evaluate complex technology environments.
• Apply data analytics tools and techniques to ident