Technology Audit Senior

Overview

• BA/BS degree in computer science or related field, MS or MBA is a plus
• CISA, CISM or CISSP certification preferred
• At Least 3+ years of relevant hands on SOX IT testing (internal audit or external audit) work experience in a Big 4 Public Accounting or Internal Auditing in a Fintech or technology firm.
• Possess fundamental knowledge of: IT Automated controls (e.g., configuration, workflows, interface, etc) and IT General Controls (e.g., access, change management, backup & recovery, etc);
• Must possess strong analytical skills and high standards of accuracy and attention to detail
• Ability to identify risk in an agile and innovative technology environment
• Familiarity with SDLC/Agile methodologies; AWS or other Cloud infrastructure; microservices architecture is a plus
• Attention to detail, organized and ability to work in a complex matrixed organization required
• Excellent written and verbal communication and presentation skills required
• Ability to look ahead, anticipate questions, independently assess risk, and think critically and creatively
• Must possess confidence, good judgment, energy and personality to work in a dynamic, multi-business unit environment across all levels of management and across business units and functions
  

• Conduct annual SOX Information Technology (IT) control walkthroughs for application controls, logical access, change management, IT operation controls for applications, operating systems and databases.
• Create detailed test plans that cover all control attributes identified during walkthroughs. This includes testing processing alternatives for automated controls, performing detailed code reviews to evaluate the effectiveness of controls and more.
• Execute test plans to determine the effectiveness of IT General and IT Automated controls supporting financial reporting.
• Document and organize workpapers to clearly articulate detailed work performed for SOX IT testing.
• Ensure SOX IT audit procedures are documented, audit methodology is consistently followed and conclusions are appropriately reached.
• Provide clear and sufficient evidence to support findings, explaining complex technical information in the workpapers
• Assess the effectiveness of internal controls to determine if they are properly designed, implemented, and operating effectively.
• Identify risks and evaluate deficiencies, collaborate with control owners to determine remediation activities
• Prepare impactful SOX audit reports that are clear, precise and include all the important elements.
• Monitor management’s remediation efforts to closure, reviewing supporting evidence and retesting.
• Develop collaborative relationships with business stakeholders