Senior I​/T Auditor

The Senior Information Technology Auditor is responsible for helping the Internal Audit department maintain an independent, objective assurance and consulting function designed to add value and improve the Company's operations. This position works independently with minimal oversight, identifying and assessing risks, developing risk-based audit programs and audit strategies for complex engagements, and independently planning, executing, and leading complex audit and consulting engagements primarily related to information technology, cybersecurity, and technology-enabled business processes.

The position evaluates governance, risk management, and control processes, provides recommendations to improve the effectiveness and efficiency of Company operations, serves as an engagement lead, mentors less experienced staff, and contributes to departmental initiatives, training, and continuous improvement efforts.

This position does not have direct accountability for people or budgets. The position communicates frequently with department heads, management, technical and operational personnel, professional-level employees, executive leadership, and external auditors. The position may provide guidance, coaching, and work direction to less experienced audit staff.

• Strong analytical and problem‑solving skills
• Excellent soft skills including, but not limited to, communication (both verbal and written), teamwork, building interpersonal relationships, organizational savvy, introspection, and diplomacy
• Ability to adapt to work in a flexible team environment, work under pressure, communicate in a manner that instills purpose and confidence, and handle multiple assignments simultaneously
• Ability to communicate technical and complex technology risks to both technical and non‑technical audiences
• Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or other relevant certification preferred
• Demonstrated ability to apply advanced technology, cybersecurity, risk management, and control knowledge across several of the following areas, including experience evaluating risks and controls within complex environments:
  • Familiarity with regulatory, legal, and compliance requirements related to the Natural Gas industry or other highly regulated industries
  • Complex data analytics
  • General IT operations
  • Ability to read or write computer code (any language)
  • Microsoft technologies (Desktop, Servers, Active Directory, SharePoint, Office)
  • Operating systems (Windows, UNIX, Linux)
  • Large ERP applications (SAP S/4
    
    HANA, SAP GRC, Oracle EBS/Cloud, Workday, or similar enterprise platforms)
  • Cloud infrastructure technologies (Microsoft Azure, Amazon Web Services (AWS), and cloud-based/SaaS platforms), application development and support, and emerging technologies
  • Industrial control systems
  • Database technologies (Oracle, SQL Server, etc.)
  • Networking (various hardware/software and relevant practices)
  • System security (identity and access management, SIEM/SOC/SOAR, endpoint security, vulnerability management, and security operations)
  • Frameworks or industry best practices (e.g., COSO, COBIT, NIST, DHS, CISA, SANS, ISO 27001, MITRE ATT CK, CIS Controls, Global Internal Audit Standards, and ISACA guidance)
  • Knowledge of domestic and global data privacy regulations and requirements (e.g., CCPA, CPRA, GDPR, etc.)
  • Cybersecurity
  • Artificial intelligence, generative AI governance, automation, or other emerging technologies
  • Sarbanes‑Oxley design and operating assessments (system-generated reports, IT general controls, and automated controls)
  • Audit software (audit management, analytics, and governance, risk, and compliance (GRC) platforms)
  • Large‑scale IT system implementations, transformations, migrations, or upgrades

Las Vegas: $95,248.00 - $

At Southwest Gas, attracting the best talent is key to our strategy and success as a company. We use flexibility to develop competitive compensation offers to ensure we are able to hire the best candidates. The quoted salary range represents the minimum and maximum of the pay range for the position. It is provided as a good faith estimate as to what our ideal candidates are likely to expect, as we tailor our offers within the range based on the selected candidate's experience, industry knowledge, location, technical and communication skills and other factors that may prove relevant during the interview and selection process.