Senior IT Audit Analyst - BSC; Hybrid

Primary Purpose

The Senior IT Audit Analyst is responsible for leading audit engagements focused on evaluating IT, Cybersecurity, and Physical Security risks and controls. This role is a crucial part of the broader Exelon Audit Services team and will be tasked with leading risk assessments, developing & executing audit plans, drafting audit reports including issues & remediation actions, and supervising other analysts under the guidance of the IT Audit Manager.

The primary focus of this role will be executing risk-based operational audits of IT & Security processes, but the Senior IT Audit Analyst will also play a role in fostering a high-performance learning environment and may assist in non-IT based audits, analysis of emerging risks, and delivering Exelon's business plan through broad company-wide initiatives.

• Plan and Execute IT and Security audit engagements. Includes performing background research, including reviewing relevant regulatory standards and identifying best practices for business processes; identifying and assessing risks in current processes; developing and executing audit test plans; and drafting issues, recommendations, and reports under Manager supervision.
• Provide active coaching and support of internal audit staff members to support a high performing learning organization.
• Conduct post-audit follow up to ensure action items were completed to effectively mitigate risks identified during the audit engagement.
• Assess enterprise level risk and identify potential future engagement in support of a continuous risk assessment and engagement planning process.
• Support operational department initiatives as needed.

• Individual will be expected to display advanced proficiency in the following skill areas and consistently execute these skills in their work with the internal audit team. o Analytical - applies critical thinking and intellectual curiosity to solve complex problems with various tools and techniques. Demonstrates rapid learning and agility to factor cost of controls proactively and effectively into defining issues and issue resolution.
  
  Proactively identifies and drives improvements to optimize and simplify business processes. o Communication - provides clear written and verbal communication while actively engaging and leveraging active listening skills. Adapts messaging based on audience and situation while exhibiting strong understanding of the business. Comfortable raising challenges and differing views and does so constructively. o Talent Development - applies situational leadership to provide feedback and actively engage with others.
  
  Leverages coaching to enhance talent development and to build skills and capabilities. Able to translate feedback into action while self-identifying development areas and career opportunities. Actively demonstrates emotional intelligence and self-awareness. o Risk and Controls Mastery - Demonstrates ability to identify, assess, and mitigate risk using a holistic perspective, as well as formulating action plans to achieve desired business outcomes.
  
  Applies professional judgment and strong understanding of company control frameworks and processes, to strengthen the control environment while preventing and detecting fraud, waste, and abuse.
• Individual will have frequent interaction with business process management and other internal business customers.
• Individual will engage with teams across multiple geographies and may have some infrequent work-related travel, depending on nature and scope of work activities.

• 4-7 years of professional internal or external audit experience, with at least two years focused on IT, financial systems, cybersecurity, and physical security risks and processes.
• Demonstrated strong analytical and oral and written communication skills, including in drafting and presenting reports.
• Strong understanding of the Institute of Internal Auditors' (IIA) Global Audit Standards and International Professional Practice Framework.
• Experience assessing processes using common IT and Security frameworks, such as COBIT, ISO 270001, and NIST CSF.
• Experience auditing IT implementation projects guided…