ESSENTIAL RESPONSIBILITIES ? Conduct assurance reviews and audits to evaluate the design and effectiveness of controls supporting the
company's business processes and information systems, with specific focus on IT General Controls.
? Lead and execute all aspects of the audit process, including planning, risk assessment, controls identification,
client coordination, fieldwork, data analysis, work paper documentation, reporting, and remediation validation,
with direction from senior team members.
? Understand business and IT processes to identify risks and evaluate internal controls.
? Document thorough understanding of business processes, including the role of technology in supporting the
processes. Effectively perform testing of automated business process controls.
? Assess information technology design and operating effectiveness, particularly related to application and
infrastructure logical access, change management, and operations, as well as more common information
security considerations.
? Evaluate root cause factors, extent of risk, and mitigating/compensating controls for audit testing exceptions.
? Provide first level of detail review of work paper documentation to ensure audit testing work papers are
documented in a consistent and high quality manner while executing project tasks in adherence to
established timelines.
? Partner with the Audit Services Group project leadership to assess the adequacy of the corrective action(s)
taken by management, stakeholders, and/or process owners to improve governance, risk management, and
control issues.
? Track and reports project status and milestones to project leadership and/or management.
? Discuss audit results, their impact, and recommendations for corrective actions with Audit Services Group
project leadership, external audit partners, and/or management.
? Build and develop Audit Services Group's brand within the company through meaningful relationship building.
? Coordinate audit activities with management, co-source providers, and external auditors.
? Enable continuous improvement of the Audit Services Group by identifying and communicating enhancement
opportunities to department leadership.
? Support the development of other team members within the Audit Services Group.
KNOWLEDGE, SKILLS AND ABILITIES ? Audit and/or consulting experience in most of these areas:
o Information technology controls, including access controls, systems development and change
management, IT operations, and information and data security
o Merchant Acquiring / Payment Processing industry, including underwriting, on-boarding, risk
management, chargebacks and other back-office processes
o Automated business process controls
? Experience in testing information security controls at the application, operating system, and database layers
– including logical access, change management, operations, and information security controls considerations
? Experience in executing large and complex regulatory compliance projects.
? Demonstrate strong project management and execution skills, including prioritizing tasks, balancing workload,
anticipating next steps, and adapting to change.
? Ability to lead projects with little instruction on day-to-day work, generally receiving general instructions on
new assignments.
? Tailor project approaches based on areas of key risks. Critically evaluate audit procedures to maximize the
value of each audit project.
? Proactively communicate issues with colleagues and obtain agreement on audit findings and practical
recommendations with control owners prior to presentation to management.
? Strong communication and presentation skills with an ability to tailor communications to different audiences.
? Prepare clear, concise, and accurate documentation and audit reports. Ensure compliance with audit
standards.
? Pursue work with enthusiasm, energy, drive, and team collaboration. Maintain a positive, professional, and
team-oriented attitude. Maintain a positive, professional, and team-oriented attitude.
? Establish and build effective relationships. Collaboratively work with management to improve internal controls
and processes.
? Assist and provide guidance to the Audit Services Group staff, when needed; train staff during fieldwork
REQUIRED QUALIFICATIONS ? Bachelor's degree in Accounting, Auditing, Business Management or Information Technology.
? 3+ years of relevant audit and risk management experience.
? Merchant Acquiring/Payment Processing industry experience preferred.
? Experience with internal control frameworks such as COBIT, FFIEC, Sarbanes-Oxley (SOX), SSAE18, NIST,
ISO27001, and ITIL
? Knowledge of auditing principles and practices, including the analysis and reporting of audit information.
? Knowledge of IT control concepts, including access controls, information security, process automation,
systems development and change management.
? CPA, CIA, or CISA certification preferred, or willingness to obtain certification within 1 year of employment.
? Big Four (or equivalent) audit experience preferred.
#J-18808-Ljbffr