Director IT Audit

Develop the IT Audit Plan, based on a risk assessment encompassing various quantitative and qualitative factors with emphasis on risk mitigation, operational efficiencies, revenue enhancement, and cost minimization.

Lead all IT Audits, which includes SOX testing (ITGCs, Business Application Controls and Key Reports & Spreadsheets), IT audits, shipboard audits, integrated audits with the financial/operational audit team, ERM reviews, application reviews, system implementation reviews, technical security reviews, ethics investigations, and ad-hoc assignments requested by senior management.

Help facilitate ERM on behalf of the Company’s ERM Steering Committee and Audit Committee, with a focus on significant IT risks (cybersecurity and keeping pace with technology).

Build and maintain trusted relationships across IT leadership, corporate functions, shipboard operations, and shared services to identify emerging risks, influence practical solutions, and support high-priority projects.

Serve as a catalyst for responsible AI-enabled and data-driven transformation within Internal Audit and by partnering across departments to identify and advance automation, analytics, and continuous monitoring solutions that improve efficiency, strengthen controls, and enhance the reliability of financial and operational information.

Serve as Internal Audit’s key IT Audit point person for staff, management, consultants, and external auditors.

Review audit/SOX documentation, including planning, audit/SOX program, testing, remediation, and final reporting.

Recommend improvements to processes and controls based on IT risk assessments and process evaluations.

Prepare, review, and present written reports to senior management based on audit/SOX results.

Facilitates the work of any co-source providers or external auditors.

Proactively work with key business units to promote operating practices that contribute to the development and maintenance of effective internal controls and profit maximization.

Other duties and projects as assigned.

Bachelor’s Degree in Accounting or IT related field of study. Professional certification such as Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), or Certified Internal Auditor (CIA) strongly preferred.

Minimum 8 years of IT Audit experience which includes working for a large public accounting firm and extensive Sarbanes-Oxley experience in a publicly traded company. Supervisory management experience required.

Experienced IT Audit professional, with advanced knowledge of IT audit testing and documentation, including ITGCs, Business Application controls, accounting and business operations and the following skills:
Significant experience and knowledge of key technology domains, including IT operations, infrastructure (networks, databases, and operating systems), cybersecurity, data analytics, applications, and emerging technologies. Strong analytical, written, and verbal communication skills. Demonstrates a proven track record of conducting technology audits as well as advising and influencing business stakeholders on the design, implementation, and application of IT controls. Strong business acumen and interest in the cruise industry with an understanding or awareness of the current issues / risks it is facing.

Ability to work with all levels of management within the organization and communicate business risks in easily understandable terms. Demonstrates inquisitive mindset and applies critical thinking in each assignment. Ability to influence and motivate teams and develop talent. Operates under minimal supervision. Performs tasks with minimal oversight, proactively manages deadlines to drive projects…