Overview: We are looking for a meticulous and experienced IT Auditor to join our audit and compliance team. As an IT Auditor, you will be responsible for evaluating and assessing our organization's IT systems, controls, and processes to ensure compliance with regulatory standards and industry best practices. You will conduct thorough audits, identify risks, and provide recommendations for enhancing IT security, efficiency, and governance. This role requires a deep understanding of IT systems, cybersecurity principles, audit methodologies, and regulatory requirements.
Roles And Responsibilities - Audit Planning and Preparation:
- Plan and schedule IT audits based on organizational priorities, regulatory requirements, and risk assessments.
- Define audit scope, objectives, and methodologies in collaboration with audit stakeholders.
- Risk Assessment and Control Evaluation:
- Conduct risk assessments to identify potential IT risks and vulnerabilities.
- Evaluate IT controls, policies, and procedures to ensure effectiveness and compliance with regulatory standards (e.g., GDPR, HIPAA, SOX).
- Audit Execution and Documentation:
- Perform detailed IT audits, including reviewing systems, processes, and documentation.
- Document audit findings, observations, and recommendations in audit reports.
- Recommendations and Remediation:
- Provide actionable recommendations to address identified vulnerabilities and improve IT security and controls.
- Collaborate with IT teams to develop remediation plans and monitor implementation progress.
- Compliance Monitoring and Reporting:
- Monitor compliance with audit recommendations and regulatory requirements.
- Prepare audit reports and presentations for management and stakeholders, summarizing findings and recommendations.
Skills And Qualifications
- Proven experience as an IT Auditor, Internal Auditor, or similar role in auditing IT systems and controls.
- Strong understanding of IT infrastructure, cybersecurity principles, and best practices.
- Knowledge of audit methodologies, frameworks (e.g., COBIT, NIST), and regulatory standards (e.g., ISO 27001).
- Excellent analytical and problem-solving skills, with attention to detail and accuracy.
- Effective communication skills, both verbal and written, for presenting audit findings and recommendations.
Education And Experience
- Bachelor’s degree in Information Technology, Computer Science, Accounting, or a related field. A Master’s degree or professional certifications (e.g., CISA, CISSP, CIA) is preferred.
- Proven experience in IT auditing, risk assessment, and compliance in a corporate environment or audit firm.
- Familiarity with audit tools and software for conducting IT audits and assessments.
Compensation
- The compensation package includes a competitive base salary commensurate with experience and qualifications.
- Additional benefits such as performance bonuses, healthcare coverage, and professional development opportunities will be provided.
- The exact compensation will be determined based on the candidate's expertise and alignment with the company's strategic goals.
Company Culture
Our company values integrity, accountability, and continuous improvement in IT governance and compliance. We foster a collaborative and supportive work environment where employees are encouraged to contribute to organizational success and professional growth. The IT Auditor will have the opportunity to work on challenging audits, collaborate with diverse teams, and contribute to enhancing IT security and governance practices.
Application Process
Interested candidates are encouraged to submit a resume and cover letter outlining their qualifications and interest in the IT Auditor position. We seek candidates who are passionate about IT auditing, possess strong analytical skills, and demonstrate a commitment to upholding IT security standards and regulatory compliance.
This job description outlines the key responsibilities, required skills, and compensation details for the IT Auditor position, aiming to attract qualified candidates who can conduct IT audits, assess IT systems and controls, provide recommendations for improvement, and contribute to enhancing IT governance and compliance within an organization committed to integrity and continuous improvement.