Audit Managers

Overview

Responsible for managing the execution of information systems, financial, and compliance audits and risk assessment to evaluate the effectiveness and efficiency of the internal control environment in compliance with audit quality standards.

Plan, conduct, review, and report on information systems audits using extensive knowledge and experience in auditing the full stack of IT infrastructure, including applications (including legacy applications and ERPs like SAP and Oracle), databases (including MS SQL, Oracle and DB2), operating systems (including Windows, Mainframe, Unix, Linux), auditing cloud services (Azure, AWS, Google), and network layer. Apply knowledge and experience in auditing Dev Ops to facilitate information systems audits.

Utilize extensive knowledge and experience in application security including penetration testing and vulnerability management using Qualys, as well as data extraction and data analytics using Oracle, SQL, and Power BI. Ensure that audit issues are well defined and documented accurately, and conduct root cause analysis. Execute, review, and audit IT dependent manual controls, and develop reporting systems to communicate results of audits to management and regulatory compliance agencies.

Oversee testing and documentation of financial and computer system records for information integrity and transaction accuracy. Prepare formal written reports to communicate audit results to management. Report discrepancies and make recommendations to improve operational system improvements. Utilize information technology project management principles to establish and maintain the balance of scope, schedule, and resources for auditing projects. Develop relationships with business leaders to understand business, risks, and the control environment and be considered a trusted business advisor.

Evaluate IT systems, IT processes, and business processes to identify risks and internal control gaps, and develop risk management plans to address identified risks using knowledge of IT systems, IT processes, business processes and internal control risk analysis. Identify issues, problems, and opportunities to drive continuous improvement initiatives. Apply experience with third-party risk assessments and evaluating System and Organization Controls (SOC) reports to identify areas of risk.