Technology & Security Risk Auditor

Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services. Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results. We are driven by our passion for success and we are proud to deliver best-in-class payment technology and software solutions.

Join our dynamic team and make your mark on the payments technology landscape of tomorrow. Ready to take your career global? Make your mark at one of the biggest names in payments.

We are seeking a candidate for a Fortune 500 payments technology company, Global Payment’s management recognizes the importance of managing and responding to risk. Internal Audit is an integral and valued component of Global Payments’ risk management environment. It works closely with management to deliver value-added and challenging audit projects in the areas of information technology, information security, business operations, finance & accounting, and compliance using progressive audit procedures.

Our philosophy is to evaluate complex business processes utilizing a risk-based approach and to provide the greatest value to our internal clients. We strive to apply tailored and progressive audit procedures and to avoid standard check-the-box auditing. The department is consistently recognized for its contributions to organizational improvements due to its diverse, energetic, and collaborative approach when working with management.

This role will deliver a diverse array of information technology and information security audits that include in-depth analysis and understanding of supporting business processes. This position will have the opportunity to evaluate numerous technology platforms and apply process, technology, and security risk considerations. Specifically, the role will have the opportunity to evaluate technology risks and controls within major cloud technology provider environments (e.g., Amazon AWS, Google GCP, and Microsoft Azure) as the company continues cloud technology strategic initiatives.

The candidate should have experience with a wide array of technology processes, such as infrastructure design and management, information security operations, service management, software development lifecycle, disaster recovery planning, etc.

This position provides the opportunity for future career advancement as well as exposure to senior leadership and organizational divisions across the globe. The Internal Audit team focuses heavily on risk-based audits that help management identify and reduce organizational risk. These projects vary each year and provide a high degree of challenge and diversity. The team also performs internal advisory projects and supports compliance audit responsibilities.

Familiarity with the payment processing industry and common technology control frameworks, including COBIT, NIST Cybersecurity, ISO 27000 series, PCI-DSS, and FFIEC IT Handbook is also preferred.

Support controls testing for risk-based audits and supports the project team with all aspects of the audit lifecycle, including risk assessment, planning, client coordination, fieldwork, data analysis, work paper documentation, reporting, and remediation validation, with direction from senior team members. Willingness to learn and grow technical knowledge through team collaboration. Projects will include a strong focus on information technology and information security controls in executing integrated, risk-based audits to evaluate the design and effectiveness of internal controls.

The auditor will also focus on the integration of IT and business process risk considerations within the audit process. Familiarity and understanding of technology control application in on-premise environments vs. increased automation of controls within cloud service provider (CSP) environments. Understanding of IT-managed processes, including technology architecture, system build, and provisioning, configuration management, performance monitoring, incident management, change management, user access management, disaster recovery, etc.

Evaluate key information security risks including confidentiality, integrity, and availability of technology components through a review of security operational processes, such as vulnerability management, penetration testing, security logging and…