Sr IT Auditor (Memphis, TN or Remote in USA)

Overview

The organization is seeking a Senior IT Auditor to support Internal Audit Management by providing risk-based, objective assurance, advice, and insight that enhance and protect organizational value. Under general supervision, this role performs increasingly complex IT audit assignments and works collaboratively with Internal IT business partners using a consultative/coaching approach to evaluate and improve IT-related controls, processes, and activities.

Responsibilities

• Initiate the planning process for IT audit projects, coordinate information-gathering meetings, and conduct related research.
• Propose an IT audit plan (audit approach, audit objectives, and audit programs, including test plans) for approval by the IT Audit Manager.
• Perform audits on time and in conformance with auditing standards promulgated by the Institute of Internal Auditors, including audit follow-up activities.
• Under the direction of the IT Audit Manager, conduct test work and clearly document and conclude on work performed.
• Analyze processes, risks, and controls; document work using narratives, flowcharts, and risk control matrices.
• Draft formal audit reports with sufficient clarity, conciseness, and grammatical/spelling accuracy.
• Draft presentations for the Board Audit Committee, management teams, and other committee members as requested.
• Maintain clear, effective communication with the IT Audit Manager and audit clients throughout the project.
• Develop recommendations to address detected issues and present/sell recommendations to the audit client.
• Clearly document work performed and identify weaknesses/issues.
• Proactively research business and control best practices to apply as appropriate during audits.
• Maintain a very high level of confidentiality.
• Build and maintain productive client and staff relationships, including communication, collaboration, conflict resolution, and negotiation.

Requirements

• Bachelor’s degree in Accounting, Information Systems, or equivalent.
• Certified Information Systems Auditor required or must obtain within 2 years in the position.
• 3+ years of experience in IT internal auditing.

OR

• Associate’s degree in Accounting, Information Systems, or equivalent.
• 5+ years of experience in IT internal auditing, Information Systems, or Information Security.
• Applicable certification (CISSP, CISA, etc.).

Preferred Qualifications

• Master’s degree in Accounting, Information Systems, or equivalent.
• Additional certifications such as CIA, CPA, or CFE.
• Experience with audit management software (Auditboard), data analytics, and visualization tools.
• Working knowledge of the COBIT Framework, GAIT Principles, and/or COSO Internal Control Integrated Framework, ISO 27000 series, NIST, PCI DSS, NACHA.
• Knowledge of the non-profit industry including the organization and St. Jude Children’s Research Hospital.
• Knowledge of systems used at the organization and St. Jude Children’s Research Hospital.
• Proficient understanding of internal auditing concepts, approaches, tools, and techniques; IT general controls (e.g., security, change management, disaster recovery & backup, infrastructure, etc.); Agile methodologies; cybersecurity and cloud; network architecture; IT governance processes; IT risk management and assessment processes.

Compensation & Benefits

Benefits & perks apply to Full-Time roles only.

• Core Medical Coverage: low cost, low deductible Medical, Dental, and Vision insurance plans
• 401(k) Retirement Plan with 7% Employer Contribution
• Exceptional Paid Time Off
• Maternity / Paternity Leave
• Infertility Treatment Program
• Adoption Assistance
• Education Assistance
• Enterprise Learning and Development
• And more

Location

Not specified in the provided description.

Equal Employment Opportunity

The organization is an equal employment opportunity employer and does not discriminate against any individual with regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, transgender status, disability, veteran status, genetic information, or other protected status.

Search Firms

The organization does not accept unsolicited assistance from search firms for employment opportunities. Resumes submitted by search firms to the organization or its employees without being contacted and approved by the Employee Experience team and without a valid written search agreement may result in no fee being paid if a referred candidate is hired.