IT Auditor

Staff IT Auditor

Location: Stamford CT 3-days onsite.

Main Purpose of Job:

As a key member of the Internal Audit (IA) team, the primary focus is on completing IT process documentation and testing IT controls. This role involves working with a broad spectrum of stakeholders and multiple business units. You will perform financial, operational, and compliance audits of business/IT functions and processes (currently emphasizing SOX compliance) to ensure the effectiveness of controls in accordance with applicable standards, frameworks, laws, and regulations. You may also be tasked with preparing draft results, including audit findings and recommendations for improvement. You may work on multiple projects/tasks concurrently, reporting back to the Senior IT Auditor and IT Audit Manager as agreed upon.

Key Responsibilities and Accountabilities:

Project Management:

• Help prepare planning documents (memos, project plans, etc.) to ensure a clear understanding of project requirements with IT and IA leadership, as well as the business involved.
• Utilize strong communication skills (both verbal and written) to ensure clarity around project objectives.
• Effectively prioritize multiple tasks simultaneously.

Project Execution:

• Assist in executing internal IT audits, with a focus on SOX compliance, including but not limited to:
• Attending discussions with process and control owners to clarify process/control expectations and discuss exceptions (deviations from expectations).
• Documenting processes, risks, and IT controls, ensuring completeness and accuracy with key stakeholders and control owners.
• Incorporating auditor skepticism in evaluating processes and controls and raising concerns as appropriate.
• Testing the design, implementation, and operating effectiveness of controls through evidence examination.
• Identifying exceptions and escalating as needed.
• Documenting results in a manner consistent with internal and best practice standards.

Analytical Skills:

• Ability to review evidence to identify exceptions or potential issues for further discussion with control owners and/or project leads.

IT Proficiency:

• Effective use of technology, including tech-enabled software solutions such as AuditBoard.
• Proficient knowledge of MS Office suite applications used in day-to-day testing and analytical operations.

Unusual Challenges or Circumstances:

• May be required to work outside of standard working hours, typically with advance notice.
• Travel is required, with up to 10% or more of the year spent traveling domestically.

Candidate Specifics:

Knowledge and Experience:

Mandatory:

• 1-2 years of IT SOX 404 compliance experience, specifically evaluating and testing general IT controls, process-level IT/automated controls, and information (reports) used in the operation of management controls.
• Understanding of financial, operational, strategic, compliance, and strategic risks and controls.
• Proactive, inquisitive mindset, agile learner with a team-first attitude.
• Excellent written and verbal communication skills.
• Strong team player.

Desirable:

• General understanding of the media and entertainment businesses.
• Basic understanding of common business processes (e.g., procurement/accounts payable, accounts receivable, HR/payroll, and property, plant, and equipment management).
• Experience auditing or working with enterprise software, including Oracle JDE, NetSuite, SAP, and Workday.

Moderate to strong IT skills, especially the ability to understand and articulate abstract concepts such as information flow, account management and access control, system development and change control, configuration management, and information system operations and resilience.

Skills and Abilities:

Mandatory:

• Excellent communication skills (written and verbal).
• Excellent planning and organizational skills to balance workload and deadlines.
• Strong documentation skills and attention to detail.

Desirable:

• Familiarity with AuditBoard.
• Familiarity with industry-standard IT control frameworks (COSO, COBIT, NIST CSF).
• Experience with data analytics/business intelligence tools such as PowerBI or Alteryx.

Qualifications and Training:

Mandatory:

• Bachelor s degree in accounting, Management Information Systems, or equivalent experience.

Desirable:

• Working towards certification (e.g., CPA, CIA, CISA, etc.).