IT Audit Specialist

JD – IT Senior

TEAM:

This position will support our IT Audit Group. CohnReznick’s specialized SOC practitioners focus on conducting SOC1, SOC2 and SOC3 audits for third-party service providers, while also conducting internal control assessments, attestations, penetration tests, and firewall assessments.

ROLE:

Responsibilities include but not limited to:

• Participates in planning and scoping of IT audits for both SOC engagements and ICFR audits.
• Comfortable leading technology walkthroughs in IT general controls and application control
• Develops test procedures for execution and prepares relevant documentation
• Executes testing of IT general controls and application controls based on internal and industry standards and guidelines.
• Problem solves and steps in to complete work to meet critical deadlines. Conducts root cause analysis, compensating and mitigating controls, and impact analysis.
• Communicates engagement status to client and engagement team management.
• You possess knowledge in ITGCs, IT application controls, cybersecurity as well as IT infrastructure including databases, networks and operating systems.
• Experience working with both applications and infrastructure supporting financial reporting processes.
• Being comfortable leading interviews with IT personnel to understand and document the design of IT General Controls (ITGCs).
• Having experience designing and executed testing for ITGCs. Key focus on Access Management (with related experience in Privileged Access Management and Identity and Access Management), and Change Management (with knowledge of Agile and DevOps methodologies)
• Possess supervisory skills to supervise, guide and coach activities of other department staff with varying skillsets
• Working independently or on small teams and possess the ability to multi-task to ensure timely completion of work and managing client and manager/partner expectations.
• Possess effective planning, coordination, time management, and organization skills.
• Demonstrate flexibility in prioritizing and completing assignments on time and within budget.
• Demonstrate attention to detail, strong organization skills, and ability to be agile and adaptable.
• Being comfortable interacting with clients across different levels of seniority.
• Experience presenting with a good working knowledge of Microsoft Office applications.

EXPERIENCE:

The successful candidate will have:

• 2- 4 years of relevant work experience
• Bachelor's Degree in computer science or accounting information systems;
• Experience in IT external audit, IT internal audit, and Technology Risk and / or ITGC assessment for compliance with SOX.
• ERP Oracle, SAP, JDE) and Cloud security (Azure, AWS, Google Cloud security) knowledge a plus.
• Must be able to travel, if required and work overtime during busy season
• Certified Information Systems Auditor (CISA) and/or CPA or working towards it