Lead IT Internal Auditor

Title: Lead IT Internal Auditor Location:

Hybrid / San Diego, CA Ekman Associates, Inc. is a management consulting firm that specializes in developing business, digital, and technology strategy, delivering solutions, and addressing human resource demands. Responsibilities: Assist and lead the implementation and management of the IT audit program and other audit program strategies as needed. liaise with both internal process control owners and external auditors as the main point of communication from it and for the organizations integrated financial statement audits. Work closely with internal audit teams on integrated risk assessments, scoping, and testing programs in accordance with COSO and COBIT frameworks.

Assist to provide regular controls compliance metrics reporting and tracking. Understand and apply risk and control objective concepts to assess control design and develop a test approach for the key controls. Examine internal IT controls, evaluate, and conclude results in a timely manner on the design and operational effectiveness of controls with minimal review notes; determine exposure to risk, and provide value added recommendations.

Ensure the completion of high-quality integrated test documentation, which demonstrates your understanding of it processes, key reports reliance, identified risks, and design of controls (including management review control requirements) and how to test the operation effectiveness. Document and report the remediation of control design deficiencies to policy and compliance guidelines and provide suggestions to management on ways to mitigate risk and/or enhance the effectiveness. Responsible to validate the resolution and implementation of corrective action plans.

Communicate complex technical issues in simplified terms to the relevant IT and non-IT business system owners. Review work performed by other team members where applicable and provide guidance to ensure conclusions are properly supported and work product meets guidelines. Leverage data-driven approaches to analyze business processes, including business reliance on technologies, to assess controls/risks and design audit procedures.

Work on complex transactions/issues where analysis of situation or data requires an in-depth evaluation, or you may provide guidance to staff auditors. Experience with data analytics audit a plus. Keep abreast of regulatory and it compliance developments within or outside of the company as well as evolving best practices in compliance control.

Actively improve technical and project management skills through on-the-job feedback, performance evaluations, mentoring, including maintaining your CPE, and develop as a subject matter professional in audit domains or areas. Perform other duties, special projects, and/or various internal audits, over a board range of it controls, to adequately meet the audit/project objectives, changing business conditions and/or requirements, identify opportunities for process improvements, and effectively. Qualifications: A Bachelor's Degree in Computer Information Systems, IT, or related programming knowledge a plus.

Experience - 6-10 years minimum relevant hands-on it audit experience, including it SOX compliance, IT application and operating system audit experience, including and at least 5 years from public accounting firm (Big4 a plus). Familiarity with a broad range of IT and information security products and technologies such as identity and access management (IAM), logging and monitoring and application security. Hands-on knowledge and experience in testing some or all of the following Oracle EBS, Oracle Fusion, Oracle Warehouse Management System, Hyperion and FCCS, data warehouses, ETL processes, OIC and integration and logging tools. Healthcare manufacturing experience a plus.

Demonstrate proven organizational, time-management, analytical, and communication skills and an ability to work both in teams and independently to effectively execute projects. Strong attention to detail and documentation Ability to adapt to company changing needs and balance the competing priorities, while maintaining project progress. In possession of or working towards a professional certification as a certified information systems auditor (CISA), CISM, CIA, and/or CISSP certification. training in auditing security of cloud solutions a plus.

Ability to develop new skills and stay abreast of applicable laws, the latest regulatory/sec/audit requirements, and IT compliance developments within or outside of the company as well as evolving best practices in compliance control. Strong and current understanding of SOX 404 it auditing standards and practical hands-on experience evaluating risk and executing internal audit programs. Demonstrated experience in implementing compliance frameworks such as COSO, COBIT, ISO, PCAOB, NIST, and other IT auditing standards.

Working knowledge of the NIST cybersecurity framework and cloud infrastructure risk management a plus.

Experience in testing of SOX 404 IT general controls (ITGC), IT application and IT configuration controls of ERP systems and integrations, key reports, may have some experience with analysis and data analytics, and project leadership with a large manufacturing company. Experience in auditing new system implementations (SDLC) for SOX control requirements a plus; and can provide guidance and recommendations for improvements to meet trending compliance requirements.

Hands-on experience with data visualization and data manipulation using tools such as Cphython, Azure, SQL, Python, Tableau, Power BI. Ability to have a flexible schedule to work with our global audit team and international finance, functional, and it teams. Ability to and willing and able to travel up to 25% of the time.

Qualified Candidates Only: If you wish to learn more about this opportunity and additional qualifications/responsibilities, please submit your resume. To learn more about Ekman Associates, Inc. please visit our website at www.ekmanassociates.com .