JOB SUMMARY:

The IT Audit Manager is an integral part of the Internal Audit team and a leader in managing and conducting complex information technology (IT) audits for the organization. Plans, executes and reports on all aspects of IT audits throughout the organization and its subsidiaries. Uses data and analytics to support audit observations, represents Internal Audit on diverse business projects and develops recommendations that add value to the business. Builds upon and broadens business and technical knowledge through exposure to the entire organization and frequent interactions with all levels of management.

Recognized within the organization as a functional expert with specialized depth and/or breadth of knowledge. Works independently, with guidance only in the most complex situations. Solves complex problems; identifies new solutions using a broad perspective and understanding. May lead a project team with influence over contribution of others. Translates functional vision into plans and guides their execution.

JOB DUTIES:  

• Manages and completes the planning, testing and reporting phases of IT audits under the direction of the Audit department management team, delivering on time and within budget. Conducts multiple projects simultaneously, typically leading higher risk and more complex audits while managing lower risk and less complex audits.
• Manages the IT audit activities related to the company’s Sarbanes-Oxley compliance requirements. Collaborates with and provides expertise and assistance to external auditors and other outside firms as necessary.
• Reviews the work of team members and offers suggestions for improvement. Provides on-the-job coaching to team members.
• Builds and maintains relationships with business partners at all levels. Provides advice and shares knowledge with these business partners to strengthen governance, risk and control environments and to improve process efficiency and effectiveness.
• Represents Internal Audit on strategic cross-functional project teams and during significant system implementations to provide guidance regarding internal controls and risk management.
• Obtains and demonstrates an understanding of the complex IT systems, processes, risks and controls that are relevant to the various business units across the organization and its subsidiaries.
• Participates in the Enterprise Risk Management and IT Risk Assessment activities.
• Assists in the development, modification and execution of the annual IT audit plan, based on the IT Risk Assessment.
• Utilizes a risk-based approach and evaluates the following items when managing and performing audits:
  • The economy and efficiency with which resources are employed and the quality of performance in carrying out assigned responsibilities.
  • The integrity and reliability of IT systems to identify, measure, classify and report information.
  • The effectiveness of management controls designed to safeguard company resources.
  • The application of general business and audit concepts to the needs of the organization.
  • Compliance with relevant regulatory requirements, industry practices, and/or company procedures.
• Implements the latest audit techniques and innovations to introduce continuous improvements for the audit process.
• Utilizes data, analytics and available tools to enhance audit coverage and add value to the business.
• Prepares accurate and well-written work paper documentation in accordance with department and professional standards for Audit department management to review prior to release and communication of audit recommendations to management.
• Summarizes audit observations and develops practical recommendations. Reviews and/or prepares draft audit reports that effectively communicate audit observations and recommendations to both technical and non-technical audiences, including the Audit Committee.
• Participates in financial and operational audits by leading and reviewing the testing of relevant IT controls within the scope of these reviews.
• Monitors the budgets and timelines of assigned projects, and provides regular status updates to Audit department management.
• Manages the tracking of results from prior audits and evaluates whether appropriate corrective action has been taken regarding significant risks or concerns.
• Exemplifies KCS Vision, Values, and Culture in each and every interaction with team, clients, and stakeholders.

BASIC QUALIFICATIONS: 

• Bachelor's degree from an accredited university or college, preferably in a job related major field of study such as Management Information Systems, Computer Science, Business, Finance or Accounting
• Minimum seven (7) years of professional audit experience, preferably including Sarbanes-Oxley (SOX) IT General Controls testing, or five (5) or more years of IT audit experience from a Public Accounting firm
• Or an equivalent combination of education and IT operations, compliance, risk management, or cybersecurity experience

PREFERRED REQUIREMENTS:  

• One or more professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA), or similar certifications
• Graduate degree from an accredited university or college, preferably in a relevant discipline such as Management Information Systems, Computer Science, Business, Finance or Accounting
• Experience managing or leading internal or external IT audits
• Knowledge of common internal audit standards and IT audit practices
• Understanding of recognized IT Governance Frameworks such as: COBIT, ITIL, ISO/IEC (17799, 20000 series, 27000 series), NIST (800 series, Cybersecurity), etc.
• Experience with performing pre- and post- system implementation reviews, cybersecurity assessments, audits of cloud computing (SaaS, IaaS, PaaS) environments, and/or evaluations of other IT modernization initiatives
• Experience with some or all of the following systems:
  • Enterprise resource planning systems (SAP S/4HANA and the SAP GRC module)
  • Active Directory
  • Operating Systems (Windows Server, UNIX/Linux)
  • Databases (DB2, Oracle, SQL Server)
  • VMware
  • Networking devices
• Exposure to reading and understanding program code and queries/scripts

ESSENTIAL FUNCTIONS:  

• Uses proficient computer skills (including word processing, spreadsheets, flowcharting and presentation tools) to perform and monitor assigned projects.
• Utilizes ACL, Tableau, Power BI, spreadsheets, databases, and/or other Computer Assisted Audit Tools and Techniques (CAATTs) to perform data mining and analysis.
• Exhibits proficient analytical skills (qualitative and quantitative) to analyze complex data/information and process it into meaningful conclusions.
• Identifies and assesses processes, risks, controls and evaluate the root cause and business impact of identified issues.
• Demonstrates excellent oral and written communication skills, and an ability to articulate information in a clear and concise manner.
• Displays effective writing skills when drafting materials such as reports, business correspondence, procedure manuals, etc.
• Applies effective project management and time management skills to complete assigned projects on time and within budget.
• Leverages relationship building and influencing skills to obtain necessary information and to discuss audit observations and recommendations with management.
• Exhibits organizational skills, problem solving capabilities and an acute attention to detail when performing assigned projects and documenting work papers.
• Works with limited supervision and manage workloads to meet requirements and deadlines of the position.
• Adapts and reacts effectively to ambiguous, changing and/or difficult situations.
• Reads and interprets complex documents (e.g., industry publications, technical procedures, governmental regulations) when gathering information for assigned projects.
• Presents information to small and large groups and to all levels of the organization.
• Works effectively with others using a collaborative approach with open communication and idea sharing.

We are proud to be an EEO/AA employer/Veteran/Disabled. We maintain a drug-free workplace and perform pre-employment substance abuse testing.

The duties listed are representative of the job; however, it in no way states or implies that these are the only duties a person may be required to perform.  The omission of specific statements of duties does not exclude them from the position if the work is similar, related or is an essential function of the position.

Required Skills Required Experience

KNOWLEDGE, SKILLS, AND ABILITIES:

• Must possess considerable knowledge of the recruitment and employment function including internet and social media recruiting.
• Experience using a variety of recruitment methods, such as LinkedIn and other social media platforms, to source qualified candidates and the ability to bring creative recruiting ideas to enhance our current recruiting efforts
• Must be extremely perceptive and capable of using good judgment in selecting and hiring potential employees.
• Must possess general knowledge of laws and regulations relating to recruitment and employment, Wage and Hour Laws and other relevant state, federal and local regulations.
• Must possess excellent interpersonal skills and the ability to maintain confidentiality as required.
• Must have the ability to relate to individuals at all levels.
• Must be goal oriented, with the desire to meet or exceed assigned objectives and expectations.
• Must demonstrate strong analytical skills.
• Must possess strong written and oral communication skills.
• Must possess advanced computer skills in Word, Excel, ATS and HRIS Systems.
• Must possess strong organizational, project and time management skills.

The employee is frequently required to walk and stand. Specific vision abilities required by this job include close vision and the ability to adjust focus to read and operate office equipment as necessary during the course of the work assignments.

While performing the duties of this position, the employee is regularly required to:

• USE WRITTEN AND ORAL COMMUNICATION SKILLS
• OBSERVE AND INTERPRET PEOPLE AND SITUATIONS;
• LEARN AND APPLY NEW INFORMATION OR SKILLS;
• PERFORM HIGHLY DETAILED WORK ON MULTIPLE, CONCURRENT TASKS;
• WORK UNDER INTENSIVE DEADLINES;
• INTERACT WITH STAFF, MEMBERS AND OTHERS ENCOUNTERED IN THE COURSE OF WORK.

The employee works under typical office conditions and noise levels.

DISCLAIMER:

The above information on this description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.