Job Description:
Develop the annual IT audit plan, including the annual risk assessment, in collaboration with Internal Audit leadership Assess, manage and optimize information technology risk across a wide range of areas, including cybersecurity, IT strategy and governance, IT regulatory and compliance requirements, and business continuity Manage a portfolio of assigned audits and related activities, including staffing, scheduling, and coordination with the client to ensure the timely completion of the plan. Oversee IT audits, including cybersecurity, cloud, system access controls, system implementation life cycle, and data governance Develop audit programs and testing procedures in accordance with widely accepted IT auditing and cybersecurity standards (e.g., COBIT, NIST, CIS, CSA) Manage and monitor the progress of the audit engagement, prioritize the workload of the audit team, and identify and escalate to the Director of Internal Audit any necessary changes to the audit as the engagement progresses Draft complete audit reports with minimal oversight that clearly and concisely describe issues identified during the audit engagement Ensure audit engagement quality, including adherence to Global IIA Standards and Internal Audit Department policies and standards Deliver reviews and projects on time, within agreed budget, and in accordance with IIA Standards Drive cross-functional assurance and compliance initiatives (such as risk assessments, monitoring approach, etc.) with other functions Manage audits with a collaborative tone ensuring a constructive environment is maintained between the audit team and the audit client Establish and communicate recommendations to mitigate current and emerging internal and external risks, ensuring appropriate escalation and reporting of issues impacting operations to address strategic, business and compliance objectives Build successful relationships with client management to provide value-added consultation to influence and strengthen operational efficiencies and effectiveness, promote appropriate risk management awareness and mitigation, and provide opportunities for cost savings, and standardization and globalization of processes Coach and manage junior staff effectively on assigned audits and projects Contribute to the positive and team-oriented culture by maintaining cooperative relationships (assisting other project teams when necessary), facilitating the resolution of conflicts, sharing information, and accepting and providing feedback Manage special projects as requested by management Leverage data analytics to enhance audit effectiveness and provide insights into operational risks and efficiency opportunities Assist the Director of Internal Audit in developing key risk indicators (KRIs) to monitor financial, operational, and IT risks
