TECHNOLOGY AUDIT ANALYST

This person will report into the Technology Governance, Audit and Compliance organization and will lead audit and assessment related activities impacting the Technology organization. This role will focus on many aspects of technology relative to controls evaluations, process reviews, risk assessments and audits.

Responsibilities.

• Act as the Technology Liaison between SOX and Internal Audit functions on all audit and compliance related activities.
• Partner with SOX and Internal audit to understand expectations for the role of technology
• Educate and community to technology teams
• Notify teams about control areas, audit types, timing and requirement ie.e legal/regulatory
• Make sure interviewees are prepared, obtain questions in advance, help technologies understand how to respond
• Coordinate and oversee audits and assessments
• Keep audits and assessments within scope
• Manage audit findings. Provide clarity, share additional context that auditors and/or assessors may have missed, explain compensating controls, reconsider the validity and risk level of any findings. Ensure findings are communicated, reviewed and responded to formally with the proper visibility.
• Manage remediation action items to closure. Track risks to closure. Quantify any business benefits or cost savings as a result of our work
• Publish and continue to enhance audit and assessment reporting and statistics, including the Monthly Scorecard and Confluence Space
• Execute a proactive internal review program for technology
• Policy and procedure reviews
• Application control evaluations and risk assessments
• Assist with proactive testing to identify potential issues and risks
• Assist with reviewing policy and procedure updates before they are finalized. Identify potential audit gaps/traps that could be created with any policy or procedure changes.
• Suggest mitigation opportunities
• Identify potential control gaps and work with Technology teams to mitigate risks before issues arise
• Assess opportunities for improvement in processes or tooling

   

  Skills/Experience

• Bachelor’s degree in Computer Science, Information Technology or related field
• 3 years working in an audit related function
• Minimum experience of 1 year working in a technology organization
• Strong problem solver
• Analytical mindset
• Ability to grasp complex topics
• Able to understand how missed controls equate to business risks and amp; measurable impacts. Basic understanding of applications and infrastructure technologies