Senior Manager Technology and Cybersecurity Audit

Senior Manager Technology and Cybersecurity Audit

Requirements

• Bachelor’s degree and six or more years of experience in Information Technology (IT), Auditing, Security & Privacy Services, Business Process Controls, IT Risk Management, SOX Advisory, or other related work.
• Must be able to lead discussions with technical teams and business stakeholders and have the ability to learn new technology concepts on demand.
• A deep understanding of operational audit processes in accordance with the International Standards for the Professional Practice of Internal Auditing (IIA Standards).
• Solid comprehension of information technology general and advanced controls, key industry standard frameworks, and cybersecurity protocols.
• Proficiency in basic data queries and executive summary data visualizations using tools like SQL, Google Data Studio, Tableau, Alteryx, Qlik, etc.
• Strong knowledge of networks, operating systems, servers, personal computers, system development, client/server architecture
• Excellent written and verbal communication skills to be able to summarize audit results and participate in communicating audit findings to the appropriate level of management.
• Have strong project management skills to manage and conduct audits with minimal supervision from beginning to end, also to often manage multiple audits at once.
• Willingness and travel up to approximately 25% of the time.

Responsibilities

• Oversees end to end process of complex Technology/Cybersecurity Audits ensuring we execute on our audit commitments, compliance to our methodology, development and growth of junior staff members, quality review of audit work papers, observations are properly vetted, and communicate audits results to executive management.
• Using problem solving and critical thinking skills to identify internal control deficiencies, evaluate their risk implications, and draw the appropriate conclusions to best advise management. Assist in the execution of the necessary corrective recommendations for deficiencies identified to ensure successful remediation.
• Communicating challenges and roadblocks that impact ability to meet audit commitments with senior manager, directors and business leadership.
• Participating in departmental administrative responsibilities and driving completion of selected departmental goals, such as: staff recruiting; preparation of Audit Committee Materials; Data analytics, trend reports, etc.
• Growing your knowledge and experience while working with a variety of emerging technology environments, platforms, applications and tools/utilities.

Preferred Qualifications

• A degree in Accounting, Computer Science, Engineering, Information Systems, or other relevant field.
• Professional certifications include Certified Information System Auditor (CISA), Cybersecurity Practitioner Certification (CSX-P), Certified Information Systems Security Professional (CISSP), Certified Internal Audit (CIA), or Certified Public Accountant (CPA).
• Risk Management experience (performing assessments, designing controls, managing enterprise control frameworks).
• Knowledgeable across a wide spectrum of frameworks and standards such as NIST Cyber Security Framework, COBIT, ISO 27001/27002, and CIS Security Controls.
• In depth knowledge of network and system security and practices across all major-computing areas (cloud, client/server, PC/LAN, VPN, DevOps) and Internet related technology.
• Prior work experience in a Public Accounting environment specializing in technology-based audits and cybersecurity.
• Prior work experience in first, second, or third line of defense organizations focused on cybersecurity.