IT Auditor

Job Description

As an IT Auditor within our Global Audit Department, you will work both independently and within a team to assess the design and effectiveness of controls found within and supporting the Sherwin-Williams IT environment. Within this role you will perform walkthroughs and testing procedures over IT general controls (ITGC) and business process controls, document key controls, and interact with key IT and business stakeholders.

Here at Sherwin-Williams, the IT Auditor will also help adhere to the highest degree of professional standards and strict confidentiality.

As an IT Auditor within our Global Audit Department, you will work both independently and within a team to assess the design and effectiveness of controls found within and supporting the Sherwin-Williams IT environment. Within this role you will perform walkthroughs and testing procedures over IT general controls (ITGC) and business process controls, document key controls, and interact with key IT and business stakeholders.

Here at Sherwin-Williams, the IT Auditor will also help adhere to the highest degree of professional standards and strict confidentiality.

This position is not hybrid/remote and will be located at our Global Headquarters in Cleveland, OH.

Because this role involves access to confidential financial information, the Company has determined that a review of criminal history is necessary to protect the business and its operations and reputation and to provide similar protections for its clients and potential investments.

• Execute annual Sarbanes-Oxley (SOX) compliance program
  • Participate in the completion of ITGC and business process walkthroughs
  • Prepare and test IT and business process controls through review of supporting documentation, while maintaining quality and meeting deadlines.
  • Understand SW’s divisions, business processes, and in-scope IT applications, including key data flows, in order to continuously identify opportunities for compliance improvement
  • Communicate observations in a timely manner and help consult management to resolve issues timely.
  • Consult with key process and control owners on ITGC’s, application controls, and IPE considerations for key systems within the organization.
  • Develop trusted relationships with key IT and Business stakeholders
• Execute internal audits over IT applications, ERP systems, and other IT focused areas (i.e. system conversions, cybersecurity, infrastructure)
  • Participate in the efforts around the key components of system conversions to help drive the completion of SDLC assessments (i.e. data conversion, key control mapping, testing phases (i.e. SIT, FUT, UAT, etc.), security design requirements, etc.)
  • Assist with special IT audit projects to completion, ensuring quality is maintained throughout the project
  • Focus on key business risks while executing audit programs and testing procedures
  • Participate in additional IT risk assessments and audit programs
  • Understand key risks associated with the application, database, and operating system layers
  • Support tools and resources utilized by Internal Audit
• Assist in the execution of annual financial statement audit by partnering with external auditors
  • Work with external auditors to communicate the design of key ITGC and business process controls
  • Build trusted relationships with external auditors
• Personal Career Development
  • Develop and maintain productive working relationships with company personnel, assess audit clients' satisfaction and proactively maintain contact with the audit client throughout the year
  • Use technology and resources to continually learn/share knowledge with team
  • Adhere to the highest degree of professional standards and strict confidentiality
  • Attend professional development and training sessions on a regular basis

Required:

• Must have a bachelor's degree or higher, or in lieu of a degree, 4 or more years of professional experience in one or more of the following areas: network engineering, information security, cybersecurity, IT compliance, IT risk management, or internal/external IT audit.
• 1+ years of experience in Internal/External Audit or Information…