Senior IT auditor

Company Description Our client who is a Fortune 500 Financial Services Company is looking for talented Senior IT auditors.

Job Description
• AuditingoPerform SOX IT testing for the Company’s operating units.oFormulate recommendations to improve internal control processes, work programs and other SOX compliance efforts, as appropriate.oFollow up on outstanding action points within an agreed timetable and ensure that all issues are closed in a timely fashion.oScope of audits may include any of the following:
IT general controls –testing of change management, security administration, computer operations, physical security, and other relevant IT general controlsInformation Security – execution of audits to ensure compliance with Information Security standardsFinancial Audit Assistance – support financial and operational internal auditors by extracting and analyzing data from financial systems using software tools such as IDEA.
• Business Unit Assistance:oProvide advisory services to business units relative to the design of application controls and security related controls for system implementations with a view to building in internal controls that are commensurate with the size and complexity of the operations.oWork on special technology-related projects for business units, as requested.
• Communication:oParticipation in internal planning meetings and regular communications within the Internal Audit Department.oRegular contact with the VP and SVP of Internal Audit and communication of plans and activities.oRegular contact with business unit IT management and maintenance of knowledge of business unit plans and strategies.

Qualifications
• BA/BS degree in Management Information Systems, Computer Science, or related field
• 3+ years of working experience in Information Security, IT audit and/or IT SOX Compliance
• Solid operational understanding of Identity and Access Management technologies and methodologies across multilayer and multi-technology networks, system, application and databases.
• Operational knowledge of infrastructure technologies and diverse operating systems (e.g., Virtualization, z/OS, z/VSE, UNIX/Linux and Windows platforms), Network security devices (e.g.,firewalls, intrusion detection and prevention systems, proxies, network taps), and relational databases (e.g., Oracle, Microsoft SQL, AS400, DB2, IBM Mainframe)
• Understanding of Information Security industry auditing tools (e.g., CIS Benchmarking Tool, Rapid 7, Symantec Control Compliance Suite CCS)
• Solid understanding of Backup and Recovery best practices and methodologies as well as the industry technologies utilized (e.g.,Net Backups)
• Conceptual understanding of PCI, ISO/IEC 27000 series, ITIL and COBIT standards, European data protection, IT infrastructure and processes, IT governance, project management, principles of internal controls
• Ability to independently evaluate controls over security processes, infrastructure, network, applications and databases according to established timetables and requirements
• Security and Audit certifications (e.g., CIPP, CISSP, CISM, or CISA) are desirable

Additional Information
65-95k plus bonus Summary Function:
Accounting/Auditing Experience level:
Mid-Senior Level Industry: Financial Services