Senior Director, IT Internal Audit
The Senior Director of IT Internal Audit leads and oversees the department's IT audit function. This is a vital role on the Internal Audit team responsible for assessing the integrity, efficiency, and security of IT systems and processes. This person will also lead teams comprised of internal and external resources, providing independent and objective assurance and risk advisory services designed to add value and improve the organization's operations. This person will interact with personnel at all levels of the organization and will be a trusted advisor to the Chief Audit Executive. This role will also evaluate and enhance the effectiveness of risk management, controls, and governance.
Responsibilities include:
- Support the development and execution of a risk-based value-added internal audit plan
- Serve as an independent and objective strategic partner to executive leadership and the broader organization, providing insights and recommendations to strengthen internal controls, governance, and increase efficiency.
- Present audit findings and recommendations to process and control owners at various levels.
- Oversee the planning, execution, and reporting of financial, operations, IT, and compliance audits.
- Perform or oversee special projects as requested by senior leadership or the Audit Committee.
- Support the assessment of the Company's internal controls over financial reporting (SOX). This is expected to be 30% of the overall time and resources. This includes the assessment of IT general controls, application controls, infrastructure security, and various other IT related items for SOX compliance.
- Monitor emerging risks and trends and adjust the audit plan and scope of projects accordingly.
- Collaborate with various teams including Information Security, IT Compliance, and various other teams to support risk management and operational improvement.
- Recruit, train, and mentor audit staff, supporting career development and performance management.
Qualifications include:
- 10+ years of progressive experience in internal audit, public accounting, IT, or related fields. Seven to ten years' experience in internal audit, public accounting (Big Four preferred), and/or equivalent private sector experience with at least three years managerial experience.
- Experience in a publicly traded company is highly desirable and experience in complex environments is also desired.
- Internal Controls over financial reporting or Sarbanes-Oxley experience is highly desirable with specific knowledge and experience on the assessment of IT general controls.
- Strong understanding of IT frameworks (e.g., COBIT, NIST, ISO 27001) and regulatory compliance.
- Deep knowledge of IT infrastructure, Networks, cloud environments, software development, and cybersecurity best practices.
- Demonstrate strong leadership and interpersonal skills.
- Excellent written and oral communication skills with experience interacting with all levels of management.
- Proven ability to apply knowledge, think critically, identify issues, and propose recommendations.
- Outstanding leadership and interpersonal skills, team player, flexible, self-starter, positive attitude, motivated and effective in completing multiple tasks.
- Data analytic experience is highly desirable.
- Ability to work in a hybrid work model, and the ability to travel as needed (not expecting travel to exceed 10%).
- CISA, CISSP, CIA, and other certifications are valued.
- Highly ethical and ability to properly handle confidential information.