IT Auditor

Financial Controls Leader COSO Testing

Seeking a highly motivated individual to join a team of COSO testing professionals and will have enterprise-wide exposure to key stakeholders within the external financial/risk/regulatory reporting infrastructure. The Enterprise COSO Testing team is a component of the Enterprise Controls & Oversight (ECO) Group in the Corporate Controllers group.

The IT COSO team within ECO supports the Company's on-going objective of maintaining an industry-leading information technology control environment and is responsible for the following directives:

• Providing meaningful assessments of IT control environments impacted by financial, risk, and regulatory reporting
• Assessing compliance with Company's COSO based policies for IT controls impacted by internal controls over financial reporting (SEC and Regulatory Reporting) and strategic planning for on-going IT control compliance with COSO policies (proactive anticipation of internal control related matters)
• Monitoring new and emerging internal control related guidance and issues and assist with facilitating group-wide training to interested and impacted stakeholders
• Providing consultation and subject matter expertise for process and IT control related matters including evaluating the severity of control deficiencies and related remediation efforts
• Providing process and control support and thought leadership for projects
• Interfacing with external auditors, regulators, and others on control related matters and,
• Acting as a change agent for continual improvement of the control environment.

This individual will be responsible for the following team directives:

• Performing the following for IT Application Control (ITAC) and IT General Control (ITGC) testing: Partnering with IT/LOB Process Owners/Control Owners to document significant in-scope processes according to corporate COSO policy (both process narratives and process flow diagrams). Additionally, assessing the appropriateness and completeness of key risk and key controls identified
• Performing walkthroughs of significant processes and ensure required COSO documentation is accurate and reflects relevant risk and key controls
• Partnering with IT/LOB Process Owners/Control Owners in the creation of process risk assessments (RAM) as well as validating and challenging risk assessment conclusions
• Validating and providing a credible challenge to identified shared services, third party service providers, and significant applications
• Performing COSO testing of key ITACs and ITGCs, including design effectiveness assessments and operating effectiveness testing
• Validating and challenging documentation of control deficiencies, including issue description, root cause, unmitigated impact, and corrective actions
• Analyzing the severity of control deficiencies and their impact on internal control over financial reporting
• Validating corrective actions and issues
• Building relationships and collaborating with key stakeholders in the applicable line of business (IT) functions related to assigned process areas
• Provide professional assessment and judgment on results of control testing to testing leadership
• Consult with testing leadership in a professional position related to testing results
• Assisting with projects impacting the team.

Required Qualifications:

• 4+ years of experience in one or a combination of the following: finance, accounting, analytics, reporting or business/technology audit.
• Or a BS/BA degree or higher in Finance, Accounting, Statistics, Economics, or Business and 2+ years of experience in one or a combination of the following: finance, accounting, analytics, reporting or business/technology audit

Desired Qualifications:

• Basic Microsoft Office (Word, Excel, Outlook, and PowerPoint) skills
• Intermediate Microsoft Visio skills

Other Desired Qualifications:

• 3 years' experience in IT audit and/or IT SOX advisory/consulting service or Public Accounting
• Experience with large financial institutions
• Strong knowledge of the COSO and COBIT 5 Frameworks.
• Prefer one or more of the following certifications: CISA, CISM, CISSP
• Practical experience performing and documenting IT audit/IT COSO ITGC/ITAC testing
• Strong critical thinking skills with the ability to credibly challenge status quo
• Strong relationship management skills ability to negotiate difficult positions without harming relationships

Posted On: Friday, April 20, 2018
Compensation: $120,000.00