Responsibilities
- Complete the day-to-day activities of the Technology Governance Team and collaborate with the co-sourced Internal SOX IT Audit Team.
- Coach & develop the members of the IT & Engineering teams regarding their understanding of the regulations that the organization must comply with, including the specific requirements of each regulation.
- Work with the Senior Manager of Technology Governance to ensure that all audit escalations/issues are resolved.
- Provide IT Management with status updates & reporting metrics for all key areas of the Enterprise Technology Governance program.
- Create and implement processes that will improve personnel’s retention and performance.
- Ensure accuracy and quality of work of the Technology Governance Team.
- Demonstrate ability to respond to changing departmental needs.
- Implement code of conduct and company values.
- Support the development of an internal audit plan for the Enterprise
- Assess the company’s compliance with the IT-related requirements of Sarbanes-Oxley
- Assist with the SOX IT Controls Testing & Issue Remediation
- Implement processes for the management of the Internal SOX IT Audit Team
- Complete the activities involved with planning, executing, reporting, and monitoring the results of the 2023 SOX Audit
- Work closely with the leaders of the impacted departments throughout the IT Audit process
- Identify areas of improvement for existing IT processes, policies, and controls, and identify IT control gaps throughout IT environment.
- Complete control testing workpapers and review prior period audit reports, SOC 1 & 2 reports from external vendors, and other compliance-related documentation to ensure that the organization remains compliant with all regulatory requirements and contractual obligations to external parties.
- Develop, document, and communicate audit recommendations to departments heads and IT process/control owners.
- Communicate and present the results of IT audits to IT Management
- Monitor all known IT audit/compliance issues that have been identified, and proactively follow up with the corresponding Action Plan Owners for status updates on their remediation efforts
- Conduct Learning & Development training sessions about SOX IT Controls, regulatory requirements, etc.
- Other duties as assigned by IT Management and/or the Senior Manager of Technology Governance
Qualifications
- Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP), or at least studying or planning to take those exams.
- Understanding US Regulatory requirement related to HIPAA, HITRUST, and other data security/privacy regulations such as GDPR, CCPA/CPRA, etc.
- Advanced Technical Project & Program Management
- People Management
- Has worked for the big 4 Auditing firms (Deloitte, PWC, EY, KPMG).
Screening Criteria
- Bachelor’s degree in accounting, computer science, information systems.
- Minimum of four (4) to seven (7) years of combined work experience in IT Audit and/or IT Compliance
- Must have a stable employment history.
