Lead IT Auditor

Lead IT Auditor

Requirements

• Typically, a bachelor’s degree in information systems, computer science, cybersecurity or accounting focus or equivalent combination of education and experience.
• Understanding of NIST, ISO, and other relevant standards required.
• Professional certification required. Prefer CISA, CISM, CRISC, CISSP or other technology audit or advisory-related certification.
• Typically requires 4-7 years of relevant experience.

Responsibilities

• Performs advanced technology risk assessments, identifies related technical and technology-dependent controls, defines assessment criteria, develops and executes technical test plans, identifies and reports deficiencies and recommendations, and performs follow-up on corrective actions, consistent with applicable professional standards required by the Audit Services Charter approved by the Audit Committee of the AT&T Inc. Board of Directors.
• Has advanced knowledge of IT governance and security frameworks (e.g., ITIL, NIST c) and control frameworks (COBIT, COSO) and methodologies and may be a specialist in specific technology platforms or domains including, but not limited to: cybersecurity, operating systems, databases, information security and protection, public/private cloud, code development methodologies, technology governance, infrastructure, computer operations, IT service management, third-party governance, data analysis, and artificial intelligence.
• Utilizes a data-first audit approach, technology audit tools, and Computer Assisted Auditing Techniques (CAAT) to perform advanced analysis of company technology environments. Identifies opportunities for data-driven technology risk insights, continuous auditing, and robotic process automation.
• Develops findings and recommendations for incorporation into an audit report and presents results to Senior Management. Work product may be shared directly with the Audit Committee of the Board of Directors.
• May work in a limited role as an extension of the company’s independent auditors and/or on highly sensitive independent projects. May participate in audits in high-risk areas such as joint ventures, partnerships, and subsidiaries.

Preferred Qualifications

• Ability to travel, typically not to exceed 10%