Senior Internal Auditor

JOB SUMMARY

 

To perform reviews of the sufficiency, effectiveness, and efficiency of company operating policies, processes, procedures, and practices, including the assessment of financial and operational control systems on both a regular and an irregular basis, and to review the implementation of changes to current systems, policies and processes, or of the establishment of new ones.  To identify key business area risks through application of appropriate analytical tools, methodologies, and tests.  Incumbents are expected to have information systems audit experience and to demonstrate proficiency in performing information systems audit work which conforms to professional standards. 

 

The accomplishment of these reviews assists in the attainment of the departmental audit operating plan approved by the Audit Committee of the Board of Directors.  It further promotes compliance with the departmental audit charter and provides assurances to management that the operating systems and controls established by it are sufficient to attain management’s operational and financial objectives.

 

RESPONSIBILITIES

 

·         Plans, initiates, performs, and administers assigned audits, including financial, operational and IT-related audits (including, but not limited to, IT general controls and application control reviews, project reviews, asset and license management, service management, IT governance, data management, disaster recovery management, and system security assessments), to achieve the audit objectives established for the review.

·          The complexity and size of audit assignments will vary significantly.  Decisions regarding the scope of work performed, nature of testing completed, and the reporting disposition of results may be delegated to this position with oversight by the Manager Internal Audit.

 

·         Plans, initiates, performs, and administers unscheduled projects and investigations assigned to the position to attain project goals and objectives. 

·         Provides an independent appraisal of the area under review with respect to the system of internal control, policies, business process and procedures, administrative efficiency, and competence of management and operating personnel.

·         Determines whether the Company’s internal control and operating systems ensure compliance with policies, procedures, operating plans, and industry and governmental regulations.

·         Evaluates the means by which Company physical and intangible assets are safeguarded, and as appropriate, verifies the existence of such assets.

·         Appraises the economy and efficiency with which both asset and manpower resources are employed to ensure that these resources are being optimally utilized, and that the resource is correctly matched to the task.

·         Analyzes operations and programs to determine whether the results are consistent with the objectives and goals established by management.

 

·         Understands the financial, operational, and compliance risks which affect information systems design, modification and processing activities; demonstrates the ability to identify and appropriately dimension those risks; and formulates recommendations which are appropriate, practical, and cost-effective

·         Prepares reports summarizing the work performed and of the audit issues, and provides recommendations for resolution or improvement that is issued to various levels of management.

·         Demonstrates proficiency in applying information systems industry control frameworks/leading practices as defined by COSO, COBIT, and ITIL, skills and techniques in reviewing and testing computer applications and information systems technology of varying complexity utilized by the company.

·         To accomplish the above, the position has the independence and the freedom in its decision-making to act without organizational constraints. 

·         The position interfaces with all levels of management and operating personnel

·         The performance and documentation of the audit work will comply with the I.I.A.’s International Standards for the Professional Practice of Internal Auditing.

·         Engage in professional development activities, including completion of other professional certification programs.

 

 

QUALIFICATIONS

 

·         CPA or CIA and advanced degree or equivalent; or seven to ten years related experience and/or training; or equivalent combination of education and experience.

·         Certification/Licensed in the following is a plus:

·          

•       CISA - Certified Information Systems Auditor

•       CISSP – Certified I