I​/T Auditor II

The Information Technology Auditor II is responsible for helping the Internal Audit department maintain an independent, objective assurance and consulting function designed to add value and improve the Company s operations. This position works independently with appropriate oversight, identifying and assessing risks, developing risk-based audit programs, and planning and executing audit and consulting engagements related to information technology, cybersecurity, and technology-enabled business processes.

The position evaluates governance, risk management, and control processes, provides recommendations to improve the effectiveness and efficiency of Company operations, and develops technical expertise, professional judgment, and audit leadership skills through increasingly complex assignments.

This position does not have direct accountability for people or budgets. The position communicates frequently with department heads, management, technical and operational personnel, professional-level employees, and external auditors.

This position requires at least two years of relevant experience in internal audit, external audit, information technology, cybersecurity, risk management, or related fields and a bachelor s degree in computer science, computer engineering, information systems, information technology, cybersecurity, data analytics, or a related field from an accredited university, or an equivalent combination of education and experience sufficient to successfully perform the essential job responsibilities.

The individual should also demonstrate the following qualifications:

• Strong analytical and problem-solving skills
• Excellent soft skills including communication (verbal and written), teamwork, interpersonal relationships, organizational savvy, introspection, and diplomacy
• Ability to adapt to change and balance multiple assignments
• Certification preferences:
  Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or other relevant certification
• Foundational knowledge, practical experience, or exposure in one or more of the following technology, cybersecurity, risk management, or control areas (preferred):

• Familiarity with regulatory, legal, and compliance requirements related to the natural gas industry or other highly regulated industries
• Data analytics
• General IT operations
• Ability to read or write computer code (any language)
• Microsoft technologies (Desktop, Servers, Active Directory, SharePoint, Office)
• Operating systems (Windows, UNIX, Linux)
• Large ERP applications (S/4
  
  HANA, SAP GRC, Oracle EBS/Cloud, Workday, or similar platforms)
• Cloud infrastructure technologies (Microsoft Azure, AWS), application development and support, and emerging technologies
• Industrial control systems
• Database technologies (Oracle, SQL Server, etc.)
• Networking (hardware/ software and relevant practices)
• System security (identity and access management, SIEM/SOC/SOAR, endpoint security, vulnerability management, and security operations)
• Frameworks or industry best practices (e.g., COSO, COBIT, NIST, DHS, CISA, SANS, ISO 27001, MITRE ATT&CK, CIS Controls, Global Internal Audit Standards, ISACA guidance)
• Knowledge of domestic and global data privacy regulations (e.g., CCPA, CPRA, GDPR)
• Cybersecurity
• Artificial intelligence, generative AI governance, automation, or other emerging technologies
• Sarbanes-Oxley design and operating assessments (system-generated reports, IT general controls, and automated controls)
• Audit software (audit management, analytics, and governance, risk, and compliance platforms)
• Large-scale IT system implementations, transformations, migrations, or upgrades

Las Vegas: $75,474.00 - $

Notes:
The salary range represents the minimum and maximum of the pay range for the position. It is provided as a good faith estimate; offers are tailored based on experience, industry knowledge, location, skills, and other relevant factors during the interview and selection process.