Internal Auditor

  • Milwaukee, WI
  • Posted 60+ days ago | Updated 9 hours ago

Overview

On Site
Full Time

Skills

NIST 800-53
Information Technology
IT audit
UI
Decision-making
Risk analysis
Program development
Multitasking
Analytical skill
IT management
Agile
Risk management
Network design
Data security
Active Directory
Data centers
Remote access
Operating systems
Project management
Financial services
Internal auditing
Professional services
IT service management
Cyber security
Planning
Auditing
Fraud
IMPACT
National Institute of Standards and Technology
Communication
Reporting
Testing
Documentation
Data
Collaboration
Adaptability
Supervision
Design
Cloud computing
Amazon Web Services
VMware
Regulatory Compliance
CSF
Policies
Interfaces
Management
Accounting
Finance
COBIT
ISO 9000
Privacy
HIPAA
WAN
LAN
Backup
Recovery
Messaging
Storage
Virtualization
Presentations
CISA
CISSP
IT governance
CISM
ISACA
Certified Public Accountant
Sarbanes-Oxley
Apex
SAP BASIS
Law
Innovation
Training
Recruiting

Job Details

Job#: 2015511

Job Description:
Seeking an Internal Auditor for a client of ours in Milwaukee, WI. If you are interested, send your resume to Aaron at .
JOB DESCRIPTION

Position Summary: Senior, IT & Cybersecurity Auditor

The position will be responsible for planning & executing technology & cybersecurity audits. This role will be part of the Corporate Audit & Anti-Fraud (CAAF) team and will work on a variety of audits and projects encompassing cybersecurity, information technology, and help with overall development of a cyber and technology audit framework. This exciting position will impact the overall success of the technology & cybersecurity audit program by leveraging NIST frameworks and executing, and planning for IT audits using a risk-based approach.

This position includes significant internal client interface, and as such requires strong professional presence, communication and decision-making skills. The successful candidate will be capable of identifying technology and cybersecurity risks across all areas of the company. The ability to establish exceptional relationships and credibility within the CAAF team and internal Northwestern Mutual clients will be essential to the individual's success. The Senior, IT & Cybersecurity auditor will report up to the Assistant Director, IT & Cybersecurity Audit.

Key Responsibilities:
  • Independently conducts thorough risk analysis, control identification and audit program development. Independently concludes on the effectiveness of controls and control gaps based on the results of testing. Demonstrates the ability to multi-task, by clearly documenting the results of testing on more than one audit concurrently.
  • Demonstrates technical knowledge of routine IT systems and processes and continues development of technical and intermediate analytical skills to understand more complex technologies. Interprets the associated risks, begins to develop a holistic view of risk, develops testing approach, and proposes solutions.
  • Effectively communicates audit issues and related recommendations in both technical and non-technical terms to Operational and IT management. Makes sound recommendations for audit finding rankings and effectively supports conclusions during discussions with audit clients.
  • Utilizes analytic technologies and data to enable agile methodologies and approaches to deliver increased efficiency and deeper insights on risk assurance.
  • Function as a member of the technology & cybersecurity audit team, with experience as both as an individual contributor and in team environments where collaboration and adaptability are important.
  • Handle multiple concurrent projects, meet established deadlines and quickly adapt to changing priorities, all while working under limited supervision.
  • Responsible for conducting cybersecurity design and effectiveness audits of IT systems, cloud environments (AWS, VMWARE), and network infrastructure to ensure compliance with internal standards aligning with NIST 800-53 and the NIST Cybersecurity Framework (CSF).
  • Remains current on cybersecurity auditing practices, cyber emerging threats, industry regulatory changes, and internal company policy and process changes.
  • Proactively interfaces with IT functional groups to enhance their understanding of the cybersecurity controls to drive improved security compliance and management of risk, and to strengthen effectiveness of cybersecurity controls.
  • Prepares and reports on audit recommendations and ensures they are accurately tracked in an audit repository.


MINIMUM REQUIREMENTS:
  • Strong written and verbal communication skills with the proven ability to interact effectively at all levels within and outside the organization
  • Bachelors degree in Accounting, Finance, Information Technology or another relevant field.
  • Understanding of IT audit standards and frameworks (e.g., COBIT, ISO/IEC 27002, NIST) and data security and privacy regulations (e.g. CCPA, HIPAA)
  • Knowledge and understanding of auditing IT applications, and infrastructure (network infrastructure technologies (WAN/LAN), cybersecurity, active directory, backup & recovery, data centers, messaging, mobile technologies, remote access, storage, operating systems, virtualization services, etc.)
  • Excellent project management and organization skills; ability to multitask.
  • Confidence and gravitas in working with and challenging stakeholders.
  • Excellent ability to develop and write impactful reports and presentations.

PREFERRED REQUIREMNTS:
  • Demonstrated knowledge of the regulatory environment for Financial Services industry is a plus
  • Experience with large public accounting firms or large corporate internal audit team is a plus
  • Relevant professional certification (e.g. CISA, CIPP, CISSP, CGEIT, CISM, CRISC, CIA, CPA) or the desire to actively work towards one
  • General understanding of Model Audit Rule, SOX, or general controls; direct experience a plus

Work Experience:
  • 5+ years of technology & cyber audits experience with a professional services firm, an internal audit group, or similar environment.


EEO Employer

Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at or .

Apex Systems is a world-class IT services company that serves thousands of clients across the globe. When you join Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

About Apex Systems