Senior IT Auditor

Role & responsibilities

• Create and maintain process narratives and flow charts.
• Participate in controls walkthroughs and evidence gathering (from walkthroughs, live meetings, etc.,)
• Perform SOX testing for Information Technology (ITGC) controls and Automated (ITAC) controls,
• User provisioning and access, change management, job monitoring, and backup and recovery controls,
• Key reports testing
• Data analytics on populations for exceptions and anomalies
• Understanding controls, risks, and testing objectives and how to design and test effectively and efficiently.
• Knowing how to leverage risk assessment to capture test attributes effectively, and population sampling
• Lead efforts related to quarterly management certifications (user access, change management, monitoring activities and reporting)
• Perform data analytics to support testing, leveraging tools such as SQL, Power BI, Excel, Python, or ACL to identify anomalies, trends, and control weaknesses.
• Keeping up to date with dataflows and narratives for all ITGCs and ITACs continuously.
• Prepare third-party SSAE 18 (SOC) reports for management review and complete testing.
• Support team with SDLC activities on information gathering and user acceptance testing.
• Responsible for the upkeep of SOX GRC application with real-time updates (good data hygiene), real time dashboard reporting

Preferred candidate profile

• Bachelors degree in information systems or a relevant field.

• A minimum of 2-4 years experience testing controls in information technology, audit, SOX Compliance,

applications, information security, networks, and infrastructure.

• Knowledge of internal controls over financial reporting (ICOFR), IT Governance, COSO, Cobit, NIST & InfoSEC.

• Audit experience with technologies such as ERPs (Oracle/SAP), data visualization tools (Tableau, cloud technologies (JIRA, Confluence, SFDC, etc.,), and Auditboard or other GRC platform.

• Excellent MS Office skills: Excel (pivots, formulas, tables), Visio/Flowcharts tools (flow charting, diagrams)

• Professional Certification is preferred (CISA, CISSP, SSCP, CIA, or equivalent).

• Good communication and interpersonal skills, and a willingness to learn.

• Above all else, you are bright, personable, and motivated to be creative

• Life Science /Healthcare industry experience preferred.

• Good communication and interpersonal skills, and a willingness to learn.