IT Auditor

Responsibilities

• Test and evaluate IT systems and related procedures to validate process performance measures and business controls for conformity with industry standards, company policy, and/or efficiency, accuracy, and security.

• Identify and communicate IT audit findings to management.

• Source root causes of process deficiencies and assist in solutions.

• Develop and finalize audit work papers by documenting audit tests and findings.

• Create audit work plans to address and track control deviations. Work with the appropriate individuals/teams to ensure timely remediation.

• Monitor audit findings and the timely completion of action plans to ensure all concerns or deficiencies reported are solved.

• Gather documentation required to pass various audits provided to current and prospective customers, including SOC 1 (SSAE 16 Type II), SOC 2 Type II, ISAE 3402 Type II audits, and US-EU Safe Harbor self-certification audits.

• Update audit documentation as required to meet changes in business processes and legal/regulatory compliance.

• Assist in formulating recommendations regarding control deficiencies and system ineffectiveness, identify areas for profit improvement, process efficiency and cost control. Provide suggestions for system operations and process improvement relating to information security and audit.

Skills:

• Broad knowledge of computer systems, networks, databases, and enterprise applications.

• Basic understanding of computer and network security, including firewalls, intrusion detection, encryption technologies, and network protocols.

• Excellent attention to detail.

• Keen ability to recognize, address, and follow-up on audit issues.

• Effective written and verbal communication skills.

• Strong organizational ability.

• Proven analytical and problem-solving skills.

• Ability to work productively alone or in a team setting.

• Capable of adapting to fast-paced environment.

• CISA Certification is preferred.

• Maintain professional and technical knowledge by reviewing professional publications and participating in professional societies.