Senior IT Auditor; Remote

Overview

Progressive Leasing is a leading provider of in-store and e-commerce lease-to-own solutions. With more than 20 years in Fin Tech, we’ve grown from start-up to industry leader by innovating, simplifying, and valuing people. We are a subsidiary of PROG Holdings (NYSE: PRG), a Fin Tech holding company with three business segments:
Progressive Leasing, Purchasing Power (a leading employee purchase program for consumer products and services using payroll deduction), and Four, a Buy Now Pay Later (BNPL) platform. We are currently hiring a Senior IT Auditor to help grow our company and ensure our mission is achieved.

Employee Value Proposition (EVP): PROG is dedicated to providing people with opportunity; opportunity for inclusive collaboration, opportunity for innovation, and opportunity for development.

A team of risk and assurance professionals dedicated to enhancing and protecting organizational value through risk-based audit and advisory services. We partner closely with the business to strengthen governance, risk management, and internal controls while fostering a culture of accountability, collaboration, and continuous improvement. We are dedicated to creating a culture of belonging, inclusion, diversity, and equity in our teams and celebrate each individual’s contributions and uniqueness.

In this role, you will serve as an individual contributor to evaluate the effectiveness of risk management, control and governance processes by applying risk-based audit principles. You will consider opportunities to improve processes and create value for the organization through clear, risk-focused recommendations. Audit activities will include performing risk-based IT and integrated audits, SOX control design and operating effectiveness assessments and advisory engagements.

Your ability to translate technical risks into business impact, foster strong partnerships with technology and business leaders, and apply advanced critical thinking and professional judgment will be critical to your success.

• Participate in and/or oversee IT audit engagements and the IT portions of integrated audit engagements with manager supervision/guidance
• Participate in or lead engagement risk assessments with audit executive management
• Identify risks and expected controls through reviewing and/or preparing process documentation, including process flow diagrams and critical path narratives
• Develop and execute IT audit programs aligned with our audit methodology and recognized frameworks as applicable (e.g., COBIT, NIST, ISO)
• Test ITGCs, automated and configurable applications controls, and technology-dependent business processes
• Support the assessment of control deficiencies and audit findings by providing input to the issue severity, root cause and practical, value-added recommendations that balance risk mitigation and business objectives
• Prepare or detail review work papers in accordance with department standards
• Collaborate with business process auditors to develop an integrated audit approach, as appropriate
• Provide business partners timely engagement status communications and proactively escalate audit issues for timely resolution
• Draft clear, concise audit reports and present results to management; support issue validation and remediation tracking
• Promote continuous improvement in audit methodology, tools, and the use of AI and data analytics

• 3-5 years of IT audit (internal or external auditing) experience (Big 4 experience a plus)
• Bachelor’s degree in MIS, Computer Science, Finance or Accounting
• Professional certification (CISA strongly preferred; CIA or CPA a plus) or active pursuit
• Proficiency in Word, Excel, Access and Power Point
• Experience with audit and analytics tools (e.g., Audit Board, ACL, Power
  
  BI, Access, SQL, cloud platforms)
• Possess unquestionable personal and professional ethics
• Strong knowledge of IT general controls, application controls, cybersecurity, privacy and technology risk frameworks, including ISO, PCI-DSS, SSAE-16 SOC 1 & SOC 2, SOX, NIST, COBIT, GAPP & COSO
• Ability to translate technical risks into clear business impact for non-technical individuals
• Demonstrated…