Information System Auditor  

The Information System (IS) & Corporate Resource Auditor is an individual contributor and is responsible for executing assigned aspects of the audit process, including: planning, risk assessment, control identification, client coordination, fieldwork, data analysis, work paper documentation, reporting, and remediation validation. The IS and Corporate Resource Auditor will also conduct assurance reviews and audits to evaluate the design and effectiveness of controls supporting the company’s business processes and information systems based on the approved annual audit plan.

Responsibilities:

Audit Planning

• Collaborate with senior management to develop audit plans and strategies
• Identify key areas of risk and determine the scope of the audit
• Understand business and IT processes to identify risks and evaluate internal controls.

Risk Assessment

• Evaluate the organizations and information systems to identify potential risks and vulnerabilities.
• Assess the effectiveness of existing controls in mitigating risks.

Execution and Documentation

• Conduct detailed audits of information systems, business processes, and controls
• IT General Controls (ITGC) and IT Application Controls (ITAC) audits
  • Systems and applications audits
  • Cybersecurity audits
• Amenable to travel especially in project sites when assigned.
• Review and test IT security measures to ensure they meet industry standards and regulatory requirements.
• Prepare detailed audit documentation, including findings, recommendations, and evidence.
• Ensure that all work papers are organized and maintained according to audit standards

Communication and Reporting

• Communicate audit findings to relevant stakeholders, including management and IT teams.
• Provide recommendations for improving Business & IT controls and security.
• Prepare and present audit reports to senior management and audit committee.
• Highlight key findings, risks, and recommendations for improvement.

Relationship Management

• Build and maintain positive relationships with key stakeholders, including management and external auditors.

Training and Development

• Pursue professional development opportunities, including internal and external training and professional association memberships, and shares information gained with co-workers.

Qualifications:

• 2-3 years of full experience in internal and information systems audit, risk management, or related field.
• Experience in providing consulting services, including design guidance related to new system implementations.
• Experience navigating and extracting information from ERP and other SaaS applications.
• Bachelor’s degree in Accounting, Information & Communication Technology, Internal Auditing, or related field.
• Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), or Certified Internal Auditor is an advantage.