Auditor III

Overview

When you think of InComm Payments, think of Innovative Payments Technology. We were founded over 30 years ago and continue to be a pioneer in the payment (Fin Tech) industry. Since our inception, we have grown to be a team of over 3,000 employees in 35 countries around the world. We own over 400 global technical patents and a network that includes over 525,000 points of retail distribution that points to our industry expertise.

InComm Payments works with the most recognized and valued brands in the world, and we are partnered with most of the world’s leading merchants. InComm Payments is highly focused on our people and their growth, and we work hard to make a career at InComm Payments meaningful and rewarding. We value innovation, quality, passion, integrity, and responsibility in all that we do, and we are looking for great people to join our team as we move forward towards a very bright future.

InComm's Internal Audit & Risk team is looking to add a Senior Auditor to our org! As an Internal Auditor III, you will be responsible for assisting in the evaluation of the design and testing of InComm’s internal controls over financial reporting and evaluating compliance with all rules and regulations. You will assist with developing, planning, and conducting audits and tests of controls for InComm’s systems and processes.

You will also be responsible for providing recommendations to improve/enhance the internal control environment and reporting on results that will be communicated to the ERM Committee, CEO, CFO and other functional department leaders. Our team is very collaborative and frequently jumps in to assist with other teams around the organization.

The ideal candidate will be someone with a few years of IT Audit experience - SOX, COSO, COBIT, and/or NIST. You must have a team-player mindset and be excited about collaborating with other Audit team members as well as business leaders across our enterprise organization.

• Strong understanding of the internal audit lifecycle, including planning, execution, reporting, and monitoring.
• Ability to execute IT, Financial, and Operational audits across the full lifecycle.
• Understanding of risk-based audit methodologies and control design and effectiveness assessment.
• Strong understanding of control design, testing methodologies, and risk assessment techniques.
• Knowledge of regulatory and compliance requirements as well as frameworks relevant to IT, Financial, and Operational audits (e.g., PCI, COBIT, NIST, BSA/AML).
• Awareness of governance, risk management, and compliance (GRC) concepts and their practical application in auditing.
• Experience with audit tools/GRC platforms (e.g., Audit Board).
• Understanding of IT General Controls (ITGCs), application controls, and IT-dependent manual controls.
• Ability to map controls and audit procedures to relevant frameworks and regulatory requirements.
• Participates in audit planning activities, including scoping, risk assessment, and development of audit procedures.
• Comprehensive understanding of walkthrough procedures to validate control design and implementation.
• Ability to lead walkthrough meetings with business owners and identify key risks, control points, and control gaps during walkthroughs and validate process documentation accuracy to be documented in process narratives/process flows.
• Ability to create high-quality process narratives, documentation, and audit work papers.
• Strong analytical and problem-solving skills with attention to detail.
• Proactively communicates audit status, risks, and emerging findings to stakeholders throughout the audit lifecycle.
• Drafts audit observations and audit reports, including clearly articulating risks, root causes, and recommendations.
• Strong understanding of internal audit issue management processes, including identification, documentation, tracking, and validation of remediation activities.
• Performs quality reviews of own work to ensure completeness, accuracy, and adherence to Internal Audit methodology and standards.
• Exercises sound judgment in escalating risks and issues based on severity and organizational impact.
• Ability to manage multiple…