Sr Mgr, IT Audit

Select how often (in days) to receive an alert:

Location: New Orleans, Louisiana, United States

Company: Entergy

PS

Job Title:

Sr Mgr, IT Audit

Work Place Flexibility: Hybrid

Legal Entity: Entergy Services, LLC

The IT Audit Senior Manager role will involve establishing strategic relationships with leaders throughout the company to proactively manage risks, improve internal controls, and drive value added outcomes that align with Entergy's vision and mission. The IT Audit Senior Manager will co-lead execution of the risk assessment process and audit plan. The role is also responsible for leading and ensuring the audit teams are using the latest approved practices, tools, and technology to evaluate the adequacy, effectiveness, and completeness of internal controls needed to minimize risk.

• Continuously assess risk and trends that could impact the company's strategic and business objectives. Conduct customer engagement meetings with executive and senior leaders to gain an understanding of their key business objectives and risk concerns. Help with the development and implementation of a dynamic audit plan that reduces risk for the company and that facilitates achievement of management's business and strategic objectives.
• Provide guidance to key company stakeholders to mitigate information technology (IT)/Cybersecurity risk and enhance IT/Cybersecurity internal controls. Set policy objectives over new technologies (like AI technologies, Robotic Processing Automation (RPA) and cloud hosting), people and processes. Recommend better practices to improve controls and results. Influence and advise process owners on practices that result in value (reduction of costs or risks).
• Co-lead the development and execution of the Internal Audit Strategic Plan.
• Directly manage a team of audit professionals to ensure projects are executed with the highest quality, on time, and in accordance with the IIA and other pertinent professional standards.
• Manage the co-sourced contract and audit partner hired to execute highly technical information technology projects.
• Review and approve audit reports, ensuring they are accurate, clear, concise, and relevant such that recipients readily understand issues and risks. Develop and deliver effective and persuasive presentations on complex topics to senior management.
• Manage and continuously improve the audit processes, people, and tools to meet all the IIA standards and other compliance standards while also providing value, efficiencies, and flexibility. Develop, coach, and mentor diverse audit team members.
• Utilize department resources effectively and efficiently to create value for the business. Establish measures and monitor performance of the audit teams. Assess Information Technology General Controls, Security controls, and the effectiveness of the SOX 404 control program. Provide assurances to management regarding the effectiveness of the IT/Cybersecurity control environment.
• Manage and continue to evolve the automation and data analytics program.
• Coordinate and work effectively with the external auditors, internal compliance groups (Chief Security Office, Cybersecurity, and IT) and governance committees (IT/Cybersecurity3 Lines of Defense, Third Party Management, etc.).

Minimum education required of the position

• Bachelor's Degree in Accounting, Business, Computer Science or related field; advanced degree a plus

Minimum experience required of the position

• Minimum of 10 years of audit experience; IT audit or IT security experience is a plus
• 5+ years of managerial experience is a plus

Minimum knowledge, skills and abilities required of the position

• Requires experience with IIA Audit Standards and best practices, implementation and support of Sarbanes-Oxley 404 control program, knowledge of IT general controls, COSO framework, Service Organization Control reports, ISACA and practices for information systems, NIST and other cyber risk frameworks, and CoBit or other leading control frameworks. Must have experience with data analytics tools to query data and support audits.
• Requires a detailed understanding of key technology tools and necessary controls, such as Data Loss Prevention, Threat and Vulnerability Management, Cloud Risk and Controls using CASB, RPA Bots, Identity Management, Application vulnerability scanners, Separation of Duties for IT functions, Change Management, PII Data, audit trails and trending, Vendor SLA management, etc.

Any certificates, licenses, etc
.…