Director, IT Audit

Overview

The Director of IT Audit is responsible for leading and managing the organization’s IT audit function and assessing the integrity, security, and compliance of technology systems and processes. This role provides assurance to the Board of Directors and oversees a global team of professionals. The Director will partner with Global Senior Leadership to provide strategic insights and recommendations that strengthen IT governance and risk management.

TEAM OVERSIGHT:

• Oversee the Global Technology RAAS team in the execution of independent reviews and evaluations of technology-related operations and activities to assess:
  • The reliability and integrity of internal controls over financial reporting for systems that authorize transactions
  • Compliance with policies, laws, and regulations which could have significant impact upon IT operations and processes
  • The effectiveness and efficiency of IT operations
• Ensure audits confirm with the Institute of Internal Auditors (IIA) standards
• Perform team member evaluations and establish development plans
• Establish an environment that fosters team collaboration, innovation, ownership and positive culture

COMMUNICATION:

• Conduct meetings with Sr. Management to discuss audit scope, audit results, and associated management actions to mitigate identified control gaps
• Document results of audits in formal reports that are distributed to Sr. Brand and Corporate Management
• Provide Global Management teams regular updates on audit status, and control enhancement opportunities
• Create quarterly exhibits for the Board of Directors

COORDINATION:

• Engage with, and build professional relationships with Senior Leadership across the Company to coordinate audit execution and IT risk evaluation
• Develop and maintain effective engagement with the external auditors to provide support with annual audit activities

SOX ASSESSMENT:

• Oversee the execution of the annual Global IT SOX Assessment, including driving changes to enhance efficiencies and effectiveness of testing
• Develop a program to test the design and operating effectiveness of SOX controls
• Identify and report findings (to Sr. Management and SOX Committees) on a timely basis
• Provide Sr. Management insights and perspectives on control enhancements

STRATEGY:

• Define IT Audit strategy and associated supporting programs
• Conduct annual IT Audit Risk Assessment and develop the associated IT Audit Plan
• Define and maintain program to efficiently deploy audit resources and provide audit coverage of key IT risks
• Develop programs to leverage technology (e.g., IA, Data Analytics, audit tools) to increase effectiveness and efficiency of audit coverage
• Link overall IT audit initiatives with RAAS departmental strategy to ensure effective risk coverage

• Scope: The RAAS Technology Director oversees RAAS's Global IT Audit team that provides advisory services and assurance that controls are design well and operating effectively to mitigate IT risks across the Carnival Brands. The role is critical in supporting RAAS' mission to provide assurance to the Carnival's Sr. Management teams and the Boards of Directors that the Company maintains a sound control environment, and complies with laws and regulations.
• Problem solving: The RAAS Technology Director is routinely called upon to oversee the performance of complex audits across a diverse technology environment and understand complex processes. Complex data analytics of both financial and operational data sets is routinely used to identify anomalies and interrelationships that could be an indication of risk manifestation. Given the diverse technology platforms and processes at Carnival, the Director must be able to develop pragmatic solutions to assist with the mitigate IT risks across a wide range of technologies.
• Leadership: The RAAS Technology Director oversees a global team of 10+ professionals. The team is located primarily in Miami but there are local resources that are located in California and Europe.

• Bachelor’s degree in Information Technology, Computer Science, Accounting, or related field;
  Master’s degree preferred
• Professional certifications such as CISA, CISM, CISSP,…