Director, Internal Audit

The CLEAR Internal Audit team is seeking a versatile and collaborative IT Audit Director to help establish IT Governance, Compliance, Risk, and Audit strategies throughout the organization. In this newly created role, you will be responsible for performing assurance and advisory engagements designed to analyze, assess, and strengthen the company’s technological infrastructure and internal control environment.

What you'll do:

• Oversee IT staff/independent consultants/co-sourced providers and manages the IT SOX compliance program, to include the review of walkthroughs and testing of operating effectiveness of controls and reporting. 
• Participate in pre-implementation assessments of new systems, including identification and design of relevant business processes and controls. 
• Assist in the maintenance of the audit and compliance tools (Audit Board) for the Internal Audit Department.
• Establish techniques to discover and prevent fraud and identify anti-fraud criteria and controls. 
• Coordinates with external auditors and assures maximum reliance on work performed, and if applicable, coordinates with relevant regulators. 
• Coordinates with external auditors and propose reliance of work performed, and if applicable, coordinates with relevant regulators. 
• Provide Business and IT management with guidance on IT risk management matters, particularly on application and infrastructure security. Ensure IT controls are considered as part of the company growth and expansion activities, working closely with IT management and the business in determining areas of focus. Ensure IT audits are conducted in a timely manner, address key risks, and that workpapers and reports are well written with meaningful, high-impact observations. Ensure all corrective action points are followed up on a timely basis. 
• Oversee the testing of ITGC’s to ensure adequate coverage is provided, that relevant information is being shared, and that management communication is seamless for all IT audit-based activities. 
• Participate as a stakeholder in key IT projects to ensure IT controls are embedded into the SDLC. 
• Work with key stakeholders within the company to continuously improve awareness of IT Risk and IT Internal Controls.

How you'll measure success:

• Success will be measured with how we ensure all risks are identified, mitigated and addressed. 
• Ensure we build a great audit team that works well with management and complete audits with least disruption 
• Perform audits and maintain Audit documentation as per IIA guidelines 
• Ensure there is a well documented agreed action plan with completion dates on all audit issues noted and track that as tasks are completed or issues remediated.
• Communicate well with senior management and keep them abreast of emerging risks. 

What you're great at:

• Strong expertise in SOX Compliance for systems including User Access Reviews and ITGC and Application Controls 
• Bachelor’s degree in accounting, Information Technology, or Management Information Systems. 
• 8+ years of experience required, with Big 4 experience strongly preferred. 
• Demonstrated knowledge, skills, and expertise in the field of IT auditing, risk, and controls. 
• Professional certification is preferred: Certified Internal Auditor (CIA), Certified information System Auditor (CISA), Certified Public Accountant (CPA), Certified in Risk and Information Systems Control (CRISC). 
• Expertise in auditing concepts, approaches, tools, and techniques; risks and controls; IT and Security concepts, standards, frameworks, and best practices. 
• Experience leading end-to-end IT and Information Security (IS) related engagements and serving as a primary liaison for the audit department when dealing with external auditors and regulatory agencies on IT and IS-related audit activities. 
• Demonstrated knowledge of internal controls frameworks (i.e., SOX, COSO, COBIT, NIST, ITIL, etc.), applicable regulatory requirements and identification of emerging IT and IS related risks (i.e., Cloud Computing, Data Analytics, etc.). 
• Strong verbal and written communication skills with a demonstrated ability to articulate effectively and professionally with all levels of management as well as the external auditors. 
• Knowledge of leading internal control and risk management practices and standards and the ability to perform detailed risk assessments. 
• Knowledge of process flow mapping, design and documentation of business process and general information technology controls, controls testing, evaluation of control deficiencies, and remediation plans required. 
• Detail-oriented and exceptionally organized. 
• Ability to critically