As the Manager of IT Audit and Compliance, you will play a key role in ensuring the integrity of our IT systems, compliance with Sox, and partner to ensure successful execution of new IT implementations (System Development Life Cycle 6 SDLC projects). You will help assess, monitor, and enhance our IT controls, processes and procedures.

• Lead IT Sox effort over the effectiveness of internal controls including testing of IT General Controls (ITGCs), IT application controls (ITACs), key interfaces, key reports/spreadsheets, and Soc 19s. Participate and document key IT walkthroughs in conjunction with our external auditors. Identify control deficiencies, recommend improvements, and provide guidance to key members of Management.
• Lead reviews following System Development Life Cycle controls (SDLC) for new software implementations. Partner with cross functional teams to help lead successful implementations or key system changes.
• Responsible for conducting comprehensive technology audits to evaluate effectiveness of IT controls. Includes planning, performing risk assessments, identifying controls used to manage risks, as well as developing and executing test plans to assess the adequacy and effectiveness of IT related processes and controls.
• Identifies opportunities for improving IT processes, reducing costs or improving internal controls. Work on benchmarking best in practice to enhance overall environment, including new technologies.
• Work closely with our Cyber and Privacy teams helping our teams manage ever changing risks. Stretch opportunities available to learn new areas.
• Drafts audit reports and communicates audit findings to process owners and management. Ability to work effectively with external audit.
• Communicates with Internal Audit management regarding testing status, audit issues and deadlines.
• Builds and maintains effective relationships with the various IT areas/departments.

Benefits, Tailored for You.

• Bonus eligible
• 401(k) retirement plan with discretionary match and tuition reimbursement.
• Medical, dental, vision, company paid LTD/STD, and generous amount of paid time off.
• Office includes amenities such as a cafe9, fitness center, free parking and Red Line shuttle.
• Generous associate discount; group discounts on auto, pet and homeowner insurance.
• Discount Marketplace for travel, consumer products, food, auto buying, etc.
• Associate resource groups.

• Requires at least 5-6 years of relevant experience in internal audit, external audit (i.e., Big 4 public accounting), risk consulting, IT and/or SOX compliance, with an emphasis on IT auditing.
• Strong understanding of Sox regulations and applicable IT controls. Understanding of requirements, timing and documentation.
• Understanding of System Development Life Cycle concepts.
• Demonstrated ability to work both independently and in a team environment, with good attention to detail.
• Strong verbal and written communication skills, to effectively present to peers and management.
• Ability to think strategically and develop innovative solutions
• Ability to multi-task, problem-solve, and prioritize, in order to successfully meet deadlines.

Education

• Bachelor's degree in Computer Science, Management Information Systems, Information Security or related field of study. Experience in accounting or other business discipline is also desirable.
• Masters or Advanced Degree is a plus.
• Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA) or other IT audit or security related certification (CISSP) is preferred. PCI, CPRA, or Cyber knowledge is a plus.

Physical Requirements

• Sedentary work, prolonged periods of time working at a desk and on a computer.
• Ability to communicate information and observe details at close range.
• Light lifting may be required

The above statements are intended to describe the general nature and level of work being performed by associates assigned to this job.They are not intended to be an exhaustive list of all responsibilities, duties and skills required of this position.